You can now escalate HTTP header injection to a CRLF-Powered Desync and exploit it to serve random users a redirect to your collaborator, in a single prompt. We’ve just introduced a new scan check for
Making HTTP header injection critical with one prompt
About this summary. This is a short excerpt from the description that PortSwigger Research published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://portswigger.net/research/making-http-header-injection-critical-with-one-prompt
Source attribution: headline and facts are from PortSwigger Research (portswigger.net). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old vulnerability that allows attackers to log into…
Scammers use AI-generated images of missing pets to extort owners
When your pet goes missing, it can be totally heartbreaking. So hearing that they’ve been found is no doubt very welcome news. Even better to see a photo of them looking…
Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560)
Yes, that's right! Today we're at the aquarium. Welcome back to yet another watchTowr Labs blog post.
AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research
An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026)
Last week, there were 549 vulnerabilities disclosed in 351 WordPress Plugins and 4 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability…
Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
Key Points Agentic hacking platforms like ARTEX, where AI models autonomously drive vulnerability discovery and exploitation, have been observed to be used by various…