Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...
Two major remote code execution vulnerabilities have been disclosed and patched in GitHub and the Cursor IDE. GitHub’s CVE-2026-3854 allowed authenticated users to execute arbitrary commands via a ...
A startup called PocketOS lost its entire production database and its backups after an AI coding agent inside the Cursor ...
The founder of PocketOS said that a Cursor AI agent running on Anthropic's Claude Opus model was behind the "destructive ...