#cursor
-
Official Claude Code Extension on Cursor's Marketplace Swapped for a Version with an SSH Backdoor
A modified Claude Code extension spread through Cursor's extension marketplace. It added an attacker's key to authorized_keys and installed persistence. Cursor estimates that at most 5,000 users were affected.
-
Which Services Do AI Agents Choose: Lessons from 17,000 Sessions of Claude, Codex and Cursor
The company Armature ran a large-scale experiment to figure out which third-party services coding agents recommend and install in real projects. The results were far from always predictable.
-
Aurora Operators Use the Cursor AI Assistant to Breach Networks
The Russian-speaking ransomware group Aurora had the agentic AI assistant Cursor plan attacks and carry out exploitation. A leak of its infrastructure exposed the toolkit, chat history and ransom negotiations.
-
OpenAI announces its decision on Cursor following its acquisition by SpaceX
A post has appeared on openai.com about the decision the company has made regarding the Cursor code editor after it was acquired by SpaceX. The details of the piece are unavailable.
-
Cursor Launches Origin — Code Hosting to Spite GitHub Amid Outages
Cursor, the startup known for its AI code editor and recently folded into SpaceX, has unveiled Origin, a platform for hosting repositories — a direct alternative to GitHub. The launch coincided with yet another hours-long outage of the Microsoft service.
-
SpaceX Closes $60 Billion Deal to Acquire Cursor
Cursor, the startup building AI tools for programmers, has officially become part of SpaceX. The company promises developers access to the world's largest fleet of GPUs.
-
The Week of Sandbox Escapes: 7 Vulnerabilities in Four AI Coding Assistants
Researchers at Pillar Security found seven ways to bypass isolation in Cursor, Codex, Gemini CLI and Antigravity. In almost every case the agent didn't have to break out of the sandbox directly — it was enough to write a file the host would later trust.
-
Cursor Vulnerability: A Cloned Repository Can Run Code on Windows
A vulnerability has been found in the Cursor code editor on Windows: if a file named git.exe sits in the project root, the editor runs it with no warning and no confirmation. The malicious file then gains access to the user's SSH keys, cloud tokens and source code.