What’s the first thing you think of when you hear about ai security threats and vulnerabilities? If you’re like most people, your mind probably jumps to Large Language Model (LLM) ...

Source Code Exfiltration in Google Antigravity‍TL;DR: We explored a known issue in Google Antigravity where attackers can ...

Developer-first security tool blocks AI manipulation attacks in under 100 milliseconds with a single API call Our goal ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.

A new type of attack on artificial intelligence (AI) coding agents lets threat actors convince users to give permission to the AI to do dangerous things that ultimately could result in a software ...

The ConnectWise ScreenConnect vulnerability, which earlier this year was identified as a potential way for threat actors to perform ViewState code injection attacks, is now being exploited, according ...

A vulnerability that researchers call CurXecute is present in almost all versions of the AI-powered code editor Cursor, and can be exploited to execute remote code with developer privileges. The ...