Attackers could silently modify sensitive MCP files to trigger the execution of arbitrary code without requiring user ...

Critical flaw in Cursor AI editor let attackers execute remote code via Slack and GitHub—fixed in v1.3 update.

A vulnerability that researchers call CurXecute is present in almost all versions of the AI-powered code editor Cursor, and ...

In what's the latest instance of a software supply chain attack, unknown threat actors managed to compromise Toptal's GitHub ...