Morning Overview on MSN

Microsoft’s new AI Notepad just opened a terrifyingly easy hacker loophole

A command injection flaw in the Windows Notepad App now gives remote attackers a path to execute code over a network, turning ...
PC World

WinRAR under attack by state-level hackers, according to Google

PCWorld reports that Google’s Threat Intelligence Group discovered state-sponsored hackers from Russia and China actively exploiting a critical WinRAR vulnerability (CVE-2025-8088). This security flaw ...
CNN

Bondi’s injection of voter roll demands into Minneapolis ICE tensions draws claims of ‘ransom’

Attorney General Pam Bondi’s demand that Minnesota hand over sensitive voter registration records to the federal government amid tensions over ICE and immigration enforcement underscores the ...
USA Today

Is Saks closing stores? What we know amid CEO changes, bankruptcy

Saks Global, which owns luxury brand Saks Fifth Avenue and its discounted division Saks Off Fifth, is announced a series of leadership changes and a bankruptcy filing, leaving consumers wondering if ...
CSOonline

Critical jsPDF vulnerability enables arbitrary file read in Node.js deployments

The path traversal bug allows attackers to include arbitrary filesystem content in generated PDFs when file paths are not properly validated. A now-fixed critical flaw in the jsPDF library could ...
Forbes

Direct File Is Gone. Here’s How You Can Still File Your Taxes For Free

The IRS shut down its direct filing program for 2026, but Free File, Fillable Forms, MilTax, and some private tools remain—if you know where to look. Here’s how to navigate the free options still ...
Bleeping Computer

Are Copilot prompt injection flaws vulnerabilities or AI limits?

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security engineer in its Copilot AI assistant constitute security vulnerabilities. The ...
The Hill

IRS Direct File is gone. This is how you can still file taxes for free

(NEXSTAR) – In 2025, nearly 300,000 Americans used a new electronic system to file their taxes directly with the IRS for free. In 2026, that’s no longer an option. IRS Direct File launched as a pilot ...
SiliconANGLE

Critical ‘LangGrinch’ vulnerability in langchain-core puts AI agent secrets at risk

A new report out today from artificial intelligence security startup Cyata Security Ltd. details a recently uncovered critical vulnerability on langchain-core, the foundational library behind ...
TechCrunch

OpenAI says AI browsers may always be vulnerable to prompt injection attacks

Even as OpenAI works to harden its Atlas AI browser against cyberattacks, the company admits that prompt injections, a type of attack that manipulates AI agents to follow malicious instructions often ...
The New York Times

What to Know on the Initial Release of Materials From the Epstein Files

The Justice Department came under scrutiny for its handling of the documents and deletions online of some material. It said it would not remove mentions of Donald Trump from the files as they are ...
The Hill

Here’s how to see the Epstein files released Friday

The Justice Department released a portion of the Jeffrey Epstein files to meet the Friday deadline established in a congressional bill with a series of downloadable files related to the convicted sex ...