Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...

House Democrats helped Speaker Mike Johnson (R-LA) overcome a GOP rebellion on Wednesday to pass a three-year extension of a key government surveillance program that allows warrantless wiretapping of ...

Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace ...

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

A severe vulnerability in the AI-powered development tool Cursor allows installed extensions to access locally stored API keys and session tokens without user action, according to LayerX researchers.

Microsoft and OpenAI split, but somehow kept it together. is a senior correspondent and author of Notepad, who has been ...

Cybersecurity experts have reported a coordinated attack involving 108 Google Chrome extensions that steal user data and ...

A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel breach ...

GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and ...

The Rocsys M1 enables hands-free, multi-bay charging for robotaxi fleets as part of a broader platform designed for ...

Pakistan’s Information Minister reported ongoing efforts to bring Iran to a second round of talks. The US-Iran ceasefire ...

Trump's noncommittal comments on the US-Iran ceasefire extension led to a drop in market confidence, with April contracts at ...