Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...

House Democrats helped Speaker Mike Johnson (R-LA) overcome a GOP rebellion on Wednesday to pass a three-year extension of a key government surveillance program that allows warrantless wiretapping of ...

A severe vulnerability in the AI-powered development tool Cursor allows installed extensions to access locally stored API keys and session tokens without user action, according to LayerX researchers.

Attackers continue to scale a campaign to seed Open VSX with seemingly benign VS Code extensions that spread self-propagating ...

Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace ...

The Rocsys M1 enables hands-free, multi-bay charging for robotaxi fleets as part of a broader platform designed for ...

A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel breach ...

Real-time voice artificial intelligence startup Deepgram Inc. today announced the general availability of Flux Multilingual, ...

GitHub has launched a native stacked pull request workflow through a new CLI extension called gh-stack, closing a gap that ...

Checkmarx has confirmed that hackers stole data from its GitHub environment one week after hacking it to publish malicious ...

Claude Desktop’s browser bridge raises privacy concerns after reports that it writes Native Messaging manifests across ...

Trump's noncommittal comments on the US-Iran ceasefire extension led to a drop in market confidence, with April contracts at ...