#Cursor

One Link in a Commit Message Owns Your Editor

AISLE found the same click-to-execute bug in VS Code, Cursor, and Antigravity, proving the fork monoculture ships shared risk.

Article · 1w ago1

Subscription Arbitrage Comes for Cursor

A tiny Rust proxy runs Claude Code on Cursor's backend, replaying the exact trick Anthropic killed in April.

Article · 2w ago0

Cursor's CORS Fix Is a Critical Vulnerability

AI assistants keep reflecting the Origin header with credentials on — the one pattern that turns an authenticated API into an open door.

Article · 2w ago0

Cursor Puts a Price Tag on Agent Swarms

The same SQLite rebuild cost $10,565 with one model mix and $1,339 with another — that gap is the story.

Article · 3w ago0

Cursor's Unpatched Git.exe RCE Still Hits Windows Devs

Six months after report, opening a poisoned Windows repo still runs attacker code with no prompt.

Article · 4w ago1

Audit AI-Built MVPs Before First Paying Users

Cursor and v0 ship demos that work. They also ship the same access-control bugs attackers try first.

Article · 4w ago1

Grok 4.5 and the Rise of Co-Designed Developer Models

SpaceXAI and Cursor's joint MoE model trades absolute benchmark dominance for aggressive pricing and agent-native training.

Article · 1mo ago5

Cursor 3 and the High-Cost Shift to Agent Orchestration

Rebuilding the IDE around parallel agents isolated by Git worktrees changes how we code, but introduces new cognitive and financial costs.

Article · 1mo ago6

Why Your AI Coding Agent Needs a Local Proxy

Local routers like Weave and 9Router cut API bills and bypass the context re-read tax.

Article · 1mo ago0

Cursor's $60B Sale Tests Whether a 'Neutral' AI Editor Can Stay Neutral

SpaceX folding the most popular AI code editor into Musk's model empire turns Cursor's biggest strength — its model-agnosticism — into its biggest open question.

News · 1mo ago5

Config Files That Run Code: The Supply Chain Blind Spot Nobody Is Auditing

The Miasma worm didn't need a malicious dependency. It used .claude/settings.json, .vscode/tasks.json, and package.json to detonate a credential stealer — before you read a single line of code.

Article · 2mos ago0

Lathe Wants LLMs to Teach You, Not Do the Work for You

A new Go CLI called Lathe flips the usual LLM workflow: instead of asking the model to write your code, you ask it to generate a hands-on tutorial — then you work through it yourself.

Article · 2mos ago0

Config Files That Run Code: The Supply Chain Blindspot You're Probably Not Auditing

The Miasma worm hid a credential-stealing dropper inside ordinary config files for VS Code, Cursor, Claude Code, Gemini CLI, npm, Composer, and Bundler. Here's exactly how each vector works — and what to review before you clone.

Article · 2mos ago0