JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

ARDY is an autoregressive diffusion model designed for interactive motion generation, supporting online text prompting and flexible long-horizon kinematic constraints (root paths/waypoints, full-body ...

Cursor AI code editor faces unpatched vulnerability enabling code execution, adding to a string of critical RCE flaws ...

An unpatched vulnerability in Cursor on Windows could allow attackers to achieve code execution via malicious repositories.

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...

SpaceXAI has rolled out Grok 4.5, the first model it trained with Cursor.

A popular artificial intelligence (AI) coding tool can be exploited in just two clicks, allowing attackers to install permission-rich model context protocol (MCP) servers on privileged developers' ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

Cursor is building a general-purpose AI agent codenamed Sand to handle emails and documents, taking direct aim at Anthropic's ...

Cursor — the AI coding tool that became the most-used developer environment in enterprise software — is building something for people who don't write code. But whether it ever ships may depend on what ...

Cursor Sand is a general-purpose agent built to rival Claude Cowork and ChatGPT Work. Musk’s SpaceX may decide whether it ever ships.