I tried four vibe-coding tools, including Cursor and Replit, with no coding background. Here's what worked (and what didn't).

Varonis found a “Reprompt” attack that let a single link hijack Microsoft Copilot Personal sessions and exfiltrate data; Microsoft patched it in January 2026.

Agent Browser’s Rust binary talks to a Node daemon via JSON, so your agents get clear outputs and reliable automation steps.

Researchers uncovered a CrashFix campaign where a fake Chrome ad blocker crashes browsers to trick users into installing the ...

ClickFix variant CrashFix relies on a malicious Chrome extension to crash the browser and trick victims into installing the ...