This Week's Security Grab Bag: AI Hijacks, Fake Fixes, and a Cursor Bug

Key points

• The Hacker News published its ThreatsDay bulletin covering roughly 20 smaller security stories from the past week.
• The batch spans cloud services, AI tools, malware, data breaches, scams, and new attack techniques.
• Highlights include a technique called GhostJacking that targets AI agents, EtherHiding abuse via the ClickFix scam, and a flaw in the Cursor command-line tool used by developers.
• No single item is a headline-grabber, but together they show where attackers are pushing next.
• Security teams get a quick catch-up; the rest of us get a useful map of what to watch.

Some weeks in this job hand you a single, ugly story: a ransomware crew, which is a criminal gang that locks up a company's files and demands payment, takes down a hospital chain. Other weeks are quieter on the surface but noisier underneath. This is one of those.

The Hacker News rolled up around twenty smaller items into its ThreatsDay bulletin. On their own, none of them will make the evening news. Read together, they tell you where attackers are spending their time.

What actually happened this week?

A lot of small things, in a lot of places. The bulletin sweeps across cloud platforms (the rented computers that run most of the internet), AI assistants, everyday malware, fresh data leaks, consumer scams, and a handful of new attack tricks researchers have named for the first time.

Three items stand out.

The first is GhostJacking, an attack aimed at AI agents. An AI agent is a program that acts on your behalf, clicking links, filling forms, moving money. GhostJacking is about tricking that helper into doing something it should not, by planting instructions in content it reads. The failure mode here is the one every AI vendor keeps waving away: the agent cannot always tell an instruction from a piece of data.

The second is EtherHiding paired with ClickFix. ClickFix is a scam where a fake error message on a webpage tells you to paste a "fix" into your computer to solve a problem that does not exist. What you actually paste is a command that installs malware. EtherHiding hides the malicious code inside the Ethereum blockchain (the same public ledger that powers the cryptocurrency), which means the attackers get a place to store their payload that is very hard to take down.

The third is a flaw in Cursor's command-line tool. Cursor is an AI-assisted code editor that a lot of developers now use daily. A bug in the command-line version could be abused to run code the developer never asked for. If you build software for a living, patch it.

Should ordinary people care?

Yes, but only about two of the items. If a website ever tells you to open a terminal or the Windows Run box and paste something, close the tab. That is ClickFix. No real error message on a real website ever asks you to do that.

The other one worth knowing: as AI assistants get more power to act for you, be careful what you let them read and click on your behalf. Treat them like a new employee on day one, not a trusted deputy.

What should security teams actually do with this?

Triage it. In practice, a bulletin like this is not a to-do list. It is a signal of drift. Attackers are pushing on AI agents, on developer tools, on scams that get the victim to type the malicious command themselves. Your controls need to answer each of those.

One thing the post-mortem will say, whichever of these bites you first: nobody owned the risk before it was a headline.

Operational takeaway: if your detection stack still assumes the attacker is a human at a keyboard, you are already a week behind.