#Cursor
All CosmicBytez Labs articles tagged #Cursor, across news, security advisories, how-to guides, and projects.
- News
Cursor Confirms Breach That Pushed Malicious Claude Code Extension to Its Marketplace
Stolen Fireworks AI credentials let attackers publish trojanized Claude Code extension builds on Cursor's marketplace for about 11 hours; up to 5,000 users may be hit.
- News
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
Tampered copies of the Claude Code extension were live in Cursor's marketplace for about 11 hours, attempting host recon and a reverse SSH tunnel.
- News
Aurora Ransomware Operators Use Cursor AI Against 10 Targets
Aurora ransomware operators used Cursor's agentic AI, running Claude Sonnet, to automate recon, lateral movement, and AD exploitation across 10 victims.
- News
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Researchers from the ASSET Research Group disclosed GhostSplice — a novel cross-channel trust fragmentation attack that splits malicious instructions...
- News
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
A design flaw in the Cursor AI code editor on Windows executes any file named git.exe found in the root of a cloned project directory — automatically,...