The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor's command sandbox with no ...

Anysphere recently released Cursor 3, a redesigned interface for its AI coding tool that shifts the primary interaction model from file editing to managing parallel coding agents. The new interface ...

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.

Cursor has for the first time introduced what it claims is a competitive coding model, alongside the 2.0 version of its integrated development environment (IDE) with a new feature that allows running ...

Cursor, a San Francisco AI coding platform from startup Anysphere valued at $29.3 billion, has launched Composer 2, a new fine-tuned variant of Chinese open source model Kimi K2.5 now available inside ...

Cursor AI model training reaches a new milestone: a 1.5-trillion-parameter system pre-trained from scratch on xAI’s Colossus ...

AI coding company Cursor launched a new model this week called Composer 2, which it promoted as offering “frontier-level coding intelligence.” However, an X user posting under the name Fynn soon ...