Google launches Firebase Studio, an AI-powered cloud IDE rivaling Cursor AI, enabling code generation from natural language and images. Users need a Gemini API key.

Imagine you’re a developer, excited to try out a new tool that promises cheap access to Cursor, the AI-powered code editor everyone’s…

A Russian blockchain developer lost $500,000 to a malicious VS Code extension disguised as a Solidity tool on Open VSX, highlighting supply chain risks for devs.

A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.

A Russian crypto developer lost $500K due to a malicious "Solidity Language" extension on Open VSX for Cursor AI, highlighting new supply chain risks.

Backslash Security warns that Cursor AI's "YOLO mode" (unsupervised execution) has easily bypassed safeguards, risking file deletion, arbitrary code execution, and data compromise via simple command obfuscation.

A Devastating Supply Chain Attack

MCP, short for Multi-Command Package, is a feature in the Cursor AI code editor designed to streamline developer workflows. Think of it as a way to automate common tasks — like testing, building, or…

What I wanted

An ostensibly innocuous package for validating Google Gemini tokens manifested within the npm repository, yet beneath its rudimentary

North Korean hackers are now targeting AI tools like Cursor and Claude. The OtterCookie malware steals API keys and conversation logs. Is your dev environment safe?

Inexperienced North Korean cyber operatives have successfully exfiltrated millions of dollars in cryptocurrency over a span of several

Panther Research exposes a massive 2026 DPRK npm campaign using blockchain dead-drops to steal crypto keys and AI secrets. Secure your CI/CD pipelines now.

Novee researchers find high-severity CVE-2026-26268 flaw in Cursor AI, allowing hackers to run malicious code when developers clone repositories.

PocketOS founder says Cursor AI agent deleted its production database in 9 seconds after misusing a root API token, exposing major Railway security flaws

Socket uncovers GlassWorm: a 73-extension sleeper campaign on Open VSX targeting VS Code and Cursor. Stealthy .node binaries turn trusted tools into malware.

Cursor AI editor found storing API keys and tokens in an unprotected SQLite database, allowing extensions to steal credentials silently. CVSS 8.2. No patch yet.

A misconfigured server tied to the carding marketplace Jerry’s Store exposed 345,000 stolen credit cards after an AI coding error caused a major security flaw.