A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

Google has previewed Code Wiki, an AI project that aims to document code in a repository and keep it up to date by ...

Researchers discovered a security weakness in the AI-powered coding tool that allows malicious MCP server to hijack Cursor's ...

Authors, Creators & Presenters: Xiangyu Guo (University of Toronto), Akshay Kawlay (University of Toronto), Eric Liu (University of Toronto), David Lie (University of Toronto) ----------- PAPER ...

Cybersecurity researchers have uncovered critical remote code execution vulnerabilities impacting major artificial ...

The long-running Contagious Interview campaign is now hiding BeaverTail and InvisibleFerret payloads inside JSON storage ...

Cybersecurity researchers have discovered a set of seven npm packages published by a single threat actor that leverages a ...

Amazon’s Kiro development tool is launching broadly with new features and a unique branding strategy, as the company pushes ...

"Vibe coding" appeared in early 2025 to describe the simple idea of programming with AI tools. So I tested a range of them — ...

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

As Mozilla stumbles into 'AI everywhere,' you might be glad of a non-Google browser engine Servo is an all-new and all-Rust ...

SAN FRANCISCO, Nov. 12, 2025 (GLOBE NEWSWIRE) -- Arcjet, the security platform that ships with your code, today announced the release of native Software Development Kits (SDKs) for Nuxt and React ...