Cursor AI Code Editor Flaw Lets Hackers Run Code Automatically - 1

Image by Sigmund, from Unsplash

Cursor AI Code Editor Flaw Lets Hackers Run Code Automatically

  • Written by Kiara Fabbri Former Tech News Writer
  • Fact-Checked by Sarah Frazier Former Content Manager

More than one million developers use Cursor as their AI code editor but the tool has been found to contain a critical security flaw.

In a rush? Here are the quick facts:

  • Cursor AI editor runs malicious code from repos without user consent.
  • Workspace Trust is disabled by default in Cursor.
  • Cursor refuses to change default settings despite warnings.

According to Oasis Security , the security flaw in Cursor enables attackers to execute malicious repository code automatically as developers open their projects, with no clicks or confirmation required.

Cursor is based on Visual Studio Code (VS Code) but ships with an important security feature, Workspace Trust, turned off by default. In this way, attackers can embed malicious files into project folders which execute automatically the moment users access the folder.

That code could steal credentials, API tokens, and configuration files, or even connect to hacker-controlled servers. BleepingComputer noted that because developers’ laptops often store cloud keys and permissions, creating an entry point for attackers to spread their attacks into corporate systems.

VS Code itself is not affected because it blocks these automatic runs unless the user explicitly grants trust. To demonstrate the danger, Oasis shared a proof-of-concept showing how a simple task could send a developer’s username to an external server.

Cursor, however, has no plans to change its default settings. The company explained that “Workspace Trust disables AI and other features our users want to use within the product.” Instead, it says it will update security guidance to help users enable Workspace Trust manually if they choose.

For now, Oasis Security advises users to activate Workspace Trust in Cursor while conducting project searches for autorun tasks, and testing unknown repositories inside virtual machines.

“This has the potential to leak sensitive credentials, modify files, or serve as a vector for broader system compromise,” Oasis warned.

Apple Launches New iPhones, Apple Watches, and AirPods At Annual Event - 2

Photo by Denis Cherkashin on Unsplash

Apple Launches New iPhones, Apple Watches, and AirPods At Annual Event

  • Written by Andrea Miliani Former Tech News Expert
  • Fact-Checked by Sarah Frazier Former Content Manager

Apple launched new products during its annual product launch event on Tuesday. The tech giant unveiled a new smartphone model, the iPhone Air—its thinnest iPhone to date—as well as new iPhones, AirPods, and Apple Watches.

In a rush? Here are the quick facts:

  • Apple introduced its latest iPhone models, iPhone 17, iPhone 17 Pro, and iPhone Air at its annual product-launch event.
  • The new AirPods Pro 3 include AI-powered live translations.
  • The tech company also introduced three new watches: Apple Watch Series 11, Apple Watch SE 3, and Apple Watch Ultra 3.

According to the New York Times , Apple introduced its latest series of smartphones, which includes the iPhone 17, iPhone 17 Pro models—with major camera upgrades, including three 48-megapixel lenses with enhanced zoom—and the iPhone 17 Air, a light 0.22-inch-thin device with only a single rear camera lens.

AirPods Pro 3, the new Apple Watch lineup, iPhone 17, iPhone 17 Pro, and the all-new iPhone Air—here’s everything we just announced! pic.twitter.com/EDPNjpoUW8 — Tim Cook (@tim_cook) September 9, 2025

The new devices are expected to be more resistant to scratches and cracks compared to previous models, as these include a Ceramic Shield 2 coating. The new iPhones—and other devices—will go on sale September 19, with preorders beginning this Friday. They will also come in new colors, such as orange.

Pricing starts at $800 for the iPhone 17 with 256 GB of storage, $1,000 for the iPhone Air, and $1,100 for the iPhone 17 Pro. The new models also feature improved batteries and Apple Intelligence integration.

Apple also introduced new earbuds, the AirPods Pro 3, which include AI-powered live translation that allows users to communicate in different languages through simultaneous interpretation. The new $250 device can also track heart rate during workouts and offers improvements to its noise cancellation and battery performance.

Apple is bringing Live Translation to the AirPods Pro 3 Best new feature so far today pic.twitter.com/LbnIc8vFMv — Morning Brew ☕️ (@MorningBrew) September 9, 2025

Apple Watch Series 11, Apple Watch SE 3, and Apple Watch Ultra 3 were also unveiled at the event. The new Apple Watch Series 11, a slim watch with 5G connectivity, adds features such as chronic high blood pressure detection and sleep scoring, starting at $399.

The new entry-level model, Apple Watch SE 3, will be sold for $25 and includes similar features to previous versions, a more advanced chip, and enhanced gesture controls.

Ultimately, the Apple Watch Ultra 3, starting at $800, is designed for sporty or physically active users. The device features the largest Apple Watch screen, satellite connectivity, and an enhanced battery that lasts up to 42 hours.

In June, at its annual Worldwide Developers Conference (WWDC), Apple introduced a new software design , Liquid Glass, AI updates, and other features.