Microsoft Store now offers Paint 11.2609.401.0 to fix CVE-2026-83844, an RCE flaw; Windows Update does not deliver the fix.
Researchers show how browser extensions can abuse Claude Dispatch to approve prompts and execute code through Claude Desktop.
Chainguard's Athena validated over a dozen flaws, mostly pre-auth RCEs, in one open source project during a six-hour Mythos run.