Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

CISA added CVE-2026-45659 SharePoint Server RCE to KEV following confirmed exploitation, requiring U.S. agencies to patch by ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Look to these tools to improve your AI coding practices and the quality, security, and reliability of your AI-generated code.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

Google released a Chrome update addressing 382 security bugs, including sandbox-escape risks. Users and IT teams should ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

StegoAd Microsoft Edge extensions malware affected up to 2.6 million users after the company removed 119 add-ons that hid ...