Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...
A severe vulnerability in the AI-powered development tool Cursor allows installed extensions to access locally stored API keys and session tokens without user action, according to LayerX researchers.
A founder detailed how an AI agent destroyed much of his company's production data in a recent social media post.