Security Alert: AI Programming Tool Cursor at Risk of New Virus Hijacking
BlockBeats News, September 5th, according to Cointelegraph, cybersecurity firm HiddenLayer reported that the AI programming tool Cursor has a "CopyPasta License Attack" vulnerability. Hackers can hide malicious commands in the LICENSE.txt and README.md files to induce the AI tool to inject the vulnerability into the codebase. This tool is widely adopted by cryptocurrency exchanges like Coinbase.
The attack leverages Markdown comment hiding to inject prompts, causing AI to automatically propagate the malicious payload while editing files. Tests have shown that AI programming tools such as Windsurf, Kiro, and Aider also have the same vulnerability. The malicious code can create backdoors, steal sensitive data, or cripple systems, all while deeply concealing itself to evade detection.
You may also like
Gainers
Latest Crypto News
Data: Significant On-Chain Accumulation of chips occurred in the $84,000 to $85,000 range, with two remaining resistance levels above.
South Korea: Two Police Officers Indicted in $186 Million Cryptocurrency Laundering Case
PDAX: Philippines' Tokenized Asset Market Expected to Reach $60 Billion by 2030
On-Chain Meme Coin "emo" Surges 290% in 24 Hours, Reaching a Market Cap of $570,000
South Korea to Enhance Cryptocurrency Anti-Money Laundering Regulation, Covering Small Transactions of Less Than 1 Million KRW
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:[email protected]
VIP Services:[email protected]