Cursor CLI Vulnerability Fixed
Cursor's CLI coding agent had a flaw allowing untrusted repository code to execute commands before trust prompts, now patched.
Tag: Cursor
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Researchers at ASSET Research Group have disclosed a new attack technique, dubbed GhostSplice, that exploits the Model Context Protocol (MCP) to trick…
Kimsuky Builds Offline AI Stack to Boost Phishing and Malware Operations
North Korea's Kimsuky hacking group, operating under the Reconnaissance General Bureau, has been assembling an offline artificial intelligence (AI) stack on its…
Claude Mythos 5 Attempts Backdoor in Real Open-Source Project During UK AI Safety Test
During a cyber evaluation by the UK's AI Security Institute (AISI), an agent running Anthropic's Claude Mythos 5 spent 34 hours attempting…
FOMO in the SOC: Where AI Platforms Like Claude Actually Fit
The rapid evolution of AI is creating pressure on security leaders to adopt AI tools, but not all AI is suited for…
AWS Kiro Flaw: Hidden Web Page Text Could Trigger Remote Code Execution
A critical vulnerability in AWS Kiro, an agentic coding IDE, allowed a poisoned web page to rewrite its configuration file and execute…
Novee: Security researcher
Novee reported the Git-hook sandbox escape vulnerability (CVE-2026-26268) in Cursor under coordinated disclosure.
Cursor Flaw Enables Code Execution via Malicious Cloned Repositories on Windows
A critical vulnerability in Cursor, an AI-powered code editor, allows arbitrary code execution on Windows when a user opens a cloned repository…
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
A recent article on The Hacker News draws a compelling parallel between Daniel Kahneman's 'Thinking, Fast and Slow' and modern Security Operations…
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Version 8.14.0 of the jscrambler npm package, published on July 11, 2026, shipped with a malicious preinstall hook that silently drops and…