Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...

Creating a Chrome extension no longer requires extensive coding knowledge or years of technical experience. With the help of Cursor AI, an AI-powered code editor, you can now design, test, and publish ...

A newly disclosed flaw in the Cursor extension allows repositories to automatically execute code when a folder is opened, even without a developer’s consent. The issue stems from the extension’s ...

A severe vulnerability in the AI-powered development tool Cursor allows installed extensions to access locally stored API keys and session tokens without user action, according to LayerX researchers.