Security Alert: AI Programming Tool Cursor at Risk of New Virus Hijacking
BlockBeats News, September 5th, according to Cointelegraph, cybersecurity firm HiddenLayer reported that the AI programming tool Cursor has a "CopyPasta License Attack" vulnerability. Hackers can hide malicious commands in the LICENSE.txt and README.md files to induce the AI tool to inject the vulnerability into the codebase. This tool is widely adopted by cryptocurrency exchanges like Coinbase.
The attack leverages Markdown comment hiding to inject prompts, causing AI to automatically propagate the malicious payload while editing files. Tests have shown that AI programming tools such as Windsurf, Kiro, and Aider also have the same vulnerability. The malicious code can create backdoors, steal sensitive data, or cripple systems, all while deeply concealing itself to evade detection.
También te puede interesar
Ganadores
Últimas noticias sobre criptomonedas
「Bull Buddy」 is once again hyping up for a long position, with an average entry price of $31.97.
Kalshi has completed a $1 billion funding round at a $1.1 billion valuation
Coinbob has launched an on-chain address monitoring and copying tool for the Pacifica chain, allowing users to synchronize and earn Pacifica token rewards.
OpenMind is pleased to announce a partnership with Circle to build AI-powered payment infrastructure.
Circle announces Foundation, initial phase aims to enhance financial resilience of small businesses in the U.S.
Atención al cliente:@weikecs
Cooperación empresarial:@weikecs
Trading cuantitativo y MM:[email protected]
Programa VIP:[email protected]