Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

No more picking a camp. A named framework lets developers run Claude Code, Cursor and others from one shared file. I ...

The offices of Google are pictured in London on February 28, 2026. JUSTIN TALLIS/AFP via Getty Images Google released agents-cli on April 21, 2026, and it has shipped 13 updates in the 71 days since — ...

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, creating a new software supply ...

GPT-5.6 was already running in Codex for some users before OpenAI’s government-approved preview opened to partners. A ...

Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, and credential risk.

From apps to videos to who knows what's next ...

Opera's new Paste Protect feature blocks ClickFix and other clipboard hijacking attacks in real time, natively in the browser ...

Lemon.io's 2026 rate report, based on real contracts with 2,500+ vetted developers, shows that senior software developer ...

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

EXCLUSIVE Pentera Labs’ red teamers compromised a developer’s AI agent via his Claude Desktop app and ultimately turned that access into full remote code execution on the devs ...