Cursor Flaws Let Prompt Injection Overwrite Its Sandbox and Run Code
Cursor 3.0 fixed path-handling failures that let injected instructions write beyond a project and tamper with the sandbox protecting the host.
Read article →appsec
Software vulnerabilities, dependencies, and application security.
Hidden Web Instructions Made Kiro Run Attacker Code in Tests
A routine page fetch in older Kiro builds could end with attacker-controlled code running through a rewritten MCP configuration.
Read article →Showing 53–54 of 54