<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Threat-Roundup on CuraSec</title><link>https://curasec.metacog.co.kr/tags/threat-roundup/</link><description>Recent content in Threat-Roundup on CuraSec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 25 Sep 2026 15:49:12 +0000</lastBuildDate><atom:link href="https://curasec.metacog.co.kr/tags/threat-roundup/index.xml" rel="self" type="application/rss+xml"/><item><title>ThreatsDay Weekly Digest: AI Search Poisoning, Coding Tool Leaks, Code Execution</title><link>https://curasec.metacog.co.kr/insights/2026-09-25-threatsday-ai-search-poisoning-ai-coding-tool-leaking-repos/</link><pubDate>Fri, 25 Sep 2026 15:49:12 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-09-25-threatsday-ai-search-poisoning-ai-coding-tool-leaking-repos/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Learn:&lt;/strong> Topics like AI coding tools leaking repos and one-click code execution are directly relevant to engineering environments, but this digest provides no CVEs, affected versions, or concrete actions — review the linked full roundup to identify any items touching your stack.&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> AI search poisoning and trusted-path abuse are worth tracking as emerging lure and delivery techniques, but the summary contains no IOCs, TTPs, or detectable behaviors — check the full article for any specific campaign details.&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item></channel></rss>