#cursor


Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Sep 3, 2026 // 00:22

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository’s own Git configuration names a command that the […]

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Aug 31, 2026 // 20:53

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX’s artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according […]

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Aug 14, 2026 // 00:09

Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of […]

Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes

Jul 21, 2026 // 00:16

Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI’s Codex, Google’s Gemini CLI and Antigravity, without attacking […]

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Jul 15, 2026 // 13:57

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no […]

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Jul 2, 2026 // 02:17

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command […]

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Jul 1, 2026 // 17:47

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command […]

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Apr 30, 2026 // 11:42

Google has addressed a maximum severity security flaw in Gemini CLI — the “@google/gemini-cli” npm package and the “google-github-actions/run-gemini-cli” GitHub Actions workflow — that could […]