» Tag
cursor
13 postsSophos study: AI coding agents look like attackers to a SIEM
Sophos telemetry shows Claude Code, Cursor, and Codex trigger SIEM alerts for credential access and evasion during normal, benign operation.
Maestro AI: A Router That Stops Overpaying for LLM Calls
Maestro AI routes each LLM call in Cursor and Claude Code to the cheapest capable model, escalating to premium tiers only when task complexity demands it.
How Cursor, Claude Code, and Codex actually load your rules
Cursor loads .mdc rules conditionally, Claude Code loads CLAUDE.md upfront, Codex merges AGENTS.md by directory depth. How each tool actually works and what rule-writing habits transfer across all three.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comWhy Cursor Keeps Writing Command Injection Bugs (CWE-78)
AI code editors like Cursor generate exec() calls with interpolated user input, creating CWE-78 command injection bugs. The fix: execFile/spawn with argument arrays.
Cursor Sandbox Escape Shows AI Agents Need Kernel Boundaries
Two critical bugs in Cursor's command sandbox let an attacker-controlled AI agent write outside it and reach RCE. Both are fixed in Cursor 3.0.
Cursor Launches Origin Code Hosting Platform Amid GitHub Outage
Cursor launched its Origin code hosting platform during a GitHub outage, aiming to transform source code management with AI integration.
Local Motion Brings Local LLM Agents to Cursor and VS Code
Local Motion auto-picks a compatible local coding model on Mac, manages memory, and links to Cursor via tunnel or runs fully local inside VS Code.
The Forgotten Symlink: 'It Works' Isn't 'It's Maintained'
A repo had the right Cursor symlinks all along, but forgot why they mattered - proving working code isn't the same as maintained code.
Stop Symlinking Your Cursor and Claude Code Rules
Cursor and Claude Code rules appear shareable but are not. Learn how to synchronize both formats with a simple code generator.
Cursor and OpenVSX face extension hijacking risk
Trendyol's security team uncovered a live namespace-squatting attack abusing OpenVSX to hijack extensions in Cursor, VSCodium, Windsurf and other VS Code forks.