GoKawiil - Latest Tech News & Aggregated Headlines

This 'critical' Cursor security flaw could expose your code to malware - how to fix it

zdnet.com Webb Wright 2025-09-25 21:32:15

Shalitha Ranathunge/iStock/Getty Images Plus via Getty Images Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways A report found hackers can exploit an autorun feature in Cursor. The danger is "significant," but there's an easy fix. Cursor uses AI to assist with code-editing. A new report has uncovered what it describes as "a critical security vulnerability" in Cursor, the popular AI-powered code-editing platform. The report, published Wednesday by software compa

Topics: code cursor feature security trust

Shop Amazon

This new Android 16 QPR2 setting will make desktop mode less frustrating

androidauthority.com Unknown 2025-09-29 05:00:03

Mishaal Rahman / Android Authority TL;DR A new “Universal cursor” setting in Android 16 QPR2 will let users disable the seamless mouse movement between a phone and an external display. This toggle controls whether the mouse cursor can move between screens when it reaches the edge, preventing accidental screen-hopping. Found in the first QPR2 beta, this small but welcome change gives users more control over Android’s DeX-like desktop experience. One of the most exciting features in Android 16

Topics: android cursor desktop external mouse

Shop Amazon

Cursor AI editor lets repos “autorun” malicious code on devices

bleepingcomputer.com Unknown 2025-09-30 15:46:24

A weakness in the Cursor code editor exposes developers to the risk of automatically executing tasks in a malicious repository as soon as it’s opened. Threat actors can exploit the flaw to drop malware, hijack developer environments, or steal credentials and API tokens, without developers having to execute any commands. Cursor is an AI-powered Integrated Development Environment (IDE) built as a fork of Visual Studio Code (VS Code) that has deep integration of mainstream AI assistants like GPT-

Topics: code cursor oasis security tasks

Shop Amazon

AI apps are like music

news.ycombinator.com Mert Deveci 2025-11-10 04:59:28

This is a mental discussion I have been having for the last two months. It is about pricing in AI. I have one actionable recommendation: Kill that damn model picker. I have been coding a specific AI app. Exciting stuff. Product is obvious. I even got a plan for distribution from day 1. Or day 0. Everything clicks. Except one thing. Pricing. It's tormenting me. The Cursor Problem or is it? Everyone describes AI apps the same way: "Cursor for X." Fair enough. Cursor nailed something import

Topics: cursor know model models spotify

Shop Amazon

The GPT-5 Launch Was Concerning

news.ycombinator.com Unknown 2025-11-25 20:33:02

The GPT-5 Launch Was Concerning 08 Aug, 2025 Bs in Blueberry There were screenshots of a classic LLM issue floating around Bluesky after the GPT-5 launch yesterday, and I asked GPT-5 myself to confirm. Sam Altman touted GPT-5 as a “PhD level expert in your pocket”, but this PhD doubled down on incorrectly answering the oldest trick for LLMs in the book. When GPT-4 launched, I (and many others) believed that GPT-5's launch would be the “AGI moment”. Cherry picking “bs in blueberry” as a fail

Topics: agi colors cursor gpt openai

Shop Amazon

AI-powered Cursor IDE vulnerable to prompt-injection attacks

bleepingcomputer.com Unknown 2025-12-09 06:00:00

A vulnerability that researchers call CurXecute is present in almost all versions of the AI-powered code editor Cursor, and can be exploited to execute remote code with developer privileges. The security issue is now identified as CVE-2025-54135 and can be leveraged by feeding the AI agent a malicious prompt to trigger attacker-control commands. The Cursor integrated development environment (IDE) relies on AI agents to help developers code faster and more efficiently, allowing them to connect

Topics: agent cursor mcp researchers security

Shop Amazon

Animated Cursors

news.ycombinator.com Unknown 2025-12-22 02:59:25

Tattoy now supports animated cursors. It uses the same format as Ghostty, therefore rendering the cursor using custom shaders. Here are some popular Ghostty cursors, that you can use out-of-the-box with Tattoy. Even though Tattoy supports Ghostty cursors its rendering is quite different. Ghostty renders the cursor using actual pixels whereas Tattoy renders using UTF8 text-based "pixels", namely "▀" and "▄". This means that Tattoy cursors sometimes miss out on the subtleties of Ghostty cursors,

Topics: cursor ghostty pixels tattoy terminal

Shop Amazon

Show HN: A macOS clock that stays visible when coding or binging in fullscreen

news.ycombinator.com Unknown 2025-12-22 12:02:23

Very nice I'm a minimalist by nature and typically keep both my menu bar and Dock hidden. That said, I still like having the clock visible at all times. I've tried various widgets in the past to solve this, but none really did the trick—until now. This app nails it. I can still see the clock and date exactly where I want them, and when I move the cursor to the menu bar, the app tucks neatly underneath, just as it should. The customization options are also thoughtfully designed. Bravo!

Topics: app bar clock cursor menu

Shop Amazon

Cursor snaps up enterprise startup Koala in challenge to GitHub Copilot

techcrunch.com Maxwell Zeff 2026-01-04 12:56:12

The startup behind the viral AI coding app Cursor is snapping up top talent from AI enterprise startups in a bid to bolster its competition with Microsoft’s GitHub Copilot and win over businesses looking to supercharge their employees with AI coding tools. In one recent case, Cursor maker Anysphere struck a deal to acquire the AI-powered customer relationship management (CRM) startup Koala, two sources familiar with the matter told TechCrunch. As part of the deal, Cursor will bring on several

Topics: ai coding cursor enterprise koala

Shop Amazon

My experience with Claude Code after two weeks of adventures

news.ycombinator.com Unknown 2026-01-06 12:27:24

My Experience With Claude Code After 2 Weeks of Adventures 17 Jul, 2025 Hatching... Cursor Shenanigans Cursor, my beloved, started rate limiting shenanigans a few days back. For a good 2 weeks after June 16, 2025, we had almost infinite API request access. I had a lot of code-related work around this time as I was working on Gumroad bounties plus my AI engineering/LLM eval-related consulting work. Apart from just codegen, I also use these tools to onboard/understand codebases faster and just

Topics: claude code cursor just like

Shop Amazon

My experience with Claude Code after 2 weeks of adventures

news.ycombinator.com Unknown 2026-01-07 00:27:24

My Experience With Claude Code After 2 Weeks of Adventures 17 Jul, 2025 Hatching... Cursor Shenanigans Cursor, my beloved, started rate limiting shenanigans a few days back. For a good 2 weeks after June 16, 2025, we had almost infinite API request access. I had a lot of code-related work around this time as I was working on Gumroad bounties plus my AI engineering/LLM eval-related consulting work. Apart from just codegen, I also use these tools to onboard/understand codebases faster and just

Topics: claude code cursor just like

Shop Amazon

My Experience with Claude Code After 2 Weeks of Adventures

news.ycombinator.com Unknown 2026-01-07 06:27:24

My Experience With Claude Code After 2 Weeks of Adventures 17 Jul, 2025 Hatching... Cursor Shenanigans Cursor, my beloved, started rate limiting shenanigans a few days back. For a good 2 weeks after June 16, 2025, we had almost infinite API request access. I had a lot of code-related work around this time as I was working on Gumroad bounties plus my AI engineering/LLM eval-related consulting work. Apart from just codegen, I also use these tools to onboard/understand codebases faster and just

Topics: claude code cursor just like

Shop Amazon

Supabase MCP can leak your entire SQL database

news.ycombinator.com Unknown 2026-01-26 04:46:55

Model Context Protocol (MCP) has emerged as a standard way for LLMs to interact with external tools. While this unlocks new capabilities, it also introduces new risk surfaces. In this post, we show how an attacker can exploit Supabase’s MCP integration to leak a developer’s private SQL tables. The Problem LLMs are often used to process data according to pre-defined instructions. The system prompt, user instructions, and the data context is provided to the LLM as text. [ SYSTEM PROMPT ] You ar

Topics: agent cursor data mcp support

Shop Amazon

Supabase MCP leaks your entire SQL Database, a lethal trifecta attack

news.ycombinator.com Simon Willison 2026-01-26 16:46:55

Supabase MCP can leak your entire SQL database (via) Here's yet another example of a lethal trifecta attack, where an LLM system combines access to private data, exposure to potentially malicious instructions and a mechanism to communicate data back out to an attacker. In this case, General Analysis identify all three components in a single MCP - the Supabase MCP. They imagine a scenario where a developer asks Cursor, running the Supabase MCP, to "use cursor’s agent to list the latest support

Topics: cursor data database mcp supabase

Shop Amazon

Cursor apologizes for unclear pricing changes that upset users

techcrunch.com Maxwell Zeff 2026-01-28 17:57:09

The CEO of Anysphere, the company behind the popular AI-powered coding environment Cursor, apologized Friday for a poorly communicated pricing change to its $20-per-month Pro plan. The changes resulted in some users complaining that they unexpectedly faced additional costs. “We recognize that we didn’t handle this pricing rollout well and we’re sorry,” said Anysphere CEO Michael Truell in a blog post. “Our communication was not clear enough and came as a surprise to many of you.” Truell is ref

Topics: ai cursor models plan users

Shop Amazon

The iPad cursor gets a fun Mac-inspired feature in iPadOS 26 beta 3

9to5mac.com Ryan Christoffel 2026-01-29 12:32:23

iPadOS 26 beta 3 was just released, and alongside some design updates and new wallpaper options, Apple has given the iPad’s cursor a fun feature inspired by the Mac. iPadOS 26 cursor now supports ‘shake to find’ feature 10 years ago in macOS El Capitan, Apple added a convenient and fun new feature for the system cursor. Shake the cursor back and forth rapidly and it would enlarge, making it easier to locate. This “shake to find” feature comes in handy when you’re not sure where your cursor i

Topics: 26 cursor ipad ipados new

Shop Amazon

Spending Too Much Money on a Coding Agent

news.ycombinator.com Unknown 2026-02-02 00:26:51

On making use of large thinking models. For a year, I’d been coding almost every day with Cursor and Claude Sonnet. Anthropic’s 3.5 and 3.7 Sonnet each rightly earned their dominant place on the programming model charts: they were the least-bad coding models yet. In the earliest days of LLMs, there was tremendous interest in ever-larger model releases. Hype around bigger, slower models has since waned, as Claude 3 Opus, GPT 4.5, and OpenAI o1 – all large and technically impressive model releas

Topics: code coding cursor o3 time

Shop Amazon

Cursor launches a web app to manage AI coding agents

techcrunch.com Maxwell Zeff 2026-02-12 17:00:00

The company behind Cursor, the viral AI coding editor, launched a web app on Monday that allows users to manage a network of coding agents directly from their browser. The launch marks Cursor’s next big step beyond its integrated development environment (IDE), the core product developers use to access its tools. While Anysphere, the company behind Cursor, initially offered only this AI-powered IDE, the company has made a concerted effort to put its products in more places, and develop more agen

Topics: agents ai coding cursor users

Shop Amazon

3 more days to fuel your next big move — and save up to $210 on your TechCrunch All Stage pass

techcrunch.com Techcrunch Events 2026-02-28 22:00:00

The countdown is on — you have just 3 days left to save on your pass to TechCrunch All Stage, happening July 15 in Boston’s SoWa Power Station. After Sunday, June 22 at 11:59 p.m. PT, prices go up, and this opportunity to lock in savings disappears. If you’re a founder looking to scale, a VC hunting for breakout talent, or an operator ready to level up, this one-day founder summit is built to move you forward — with tactical insights, candid conversations, and high-impact networking from start

Topics: founder partner precursor stage ventures

Shop Amazon

Anysphere launches a $200-a-month Cursor AI coding subscription

techcrunch.com Maxwell Zeff 2026-03-08 19:45:37

Anysphere launched a new $200-a-month subscription plan for its popular AI coding tool, Cursor, the company announced in a blog post on Monday. The new plan, Ultra, offers users 20x more usage on AI models from OpenAI, Anthropic, Google DeepMind, and xAI compared to the company’s $20-a-month subscription plan, Pro. Anysphere also says Cursor users on the Ultra plan will get priority access to new features. Anysphere CEO Michael Truell said in a blog that the Ultra plan was made possible throug

Topics: ai anthropic anysphere cursor plan

Shop Amazon

Latest Tech News

This 'critical' Cursor security flaw could expose your code to malware - how to fix it

This new Android 16 QPR2 setting will make desktop mode less frustrating

Cursor AI editor lets repos “autorun” malicious code on devices

AI apps are like music

The GPT-5 Launch Was Concerning

AI-powered Cursor IDE vulnerable to prompt-injection attacks

Animated Cursors

Show HN: A macOS clock that stays visible when coding or binging in fullscreen

Cursor snaps up enterprise startup Koala in challenge to GitHub Copilot

My experience with Claude Code after two weeks of adventures

My experience with Claude Code after 2 weeks of adventures

My Experience with Claude Code After 2 Weeks of Adventures

Supabase MCP can leak your entire SQL database

Supabase MCP leaks your entire SQL Database, a lethal trifecta attack

Cursor apologizes for unclear pricing changes that upset users

The iPad cursor gets a fun Mac-inspired feature in iPadOS 26 beta 3

Spending Too Much Money on a Coding Agent

Cursor launches a web app to manage AI coding agents

3 more days to fuel your next big move — and save up to $210 on your TechCrunch All Stage pass

Anysphere launches a $200-a-month Cursor AI coding subscription

About GoKawiil

Privacy

Advertising

Latest Tech News

Trending Topics

Hot Now

Popular

Emerging

About GoKawiil

Privacy

Advertising