logo

Security Alert: AI Programming Tool Cursor at Risk of New Virus Hijacking

By: theblockbeats.news|2025/09/05 05:32:25

BlockBeats News, September 5th, according to Cointelegraph, cybersecurity firm HiddenLayer reported that the AI programming tool Cursor has a "CopyPasta License Attack" vulnerability. Hackers can hide malicious commands in the LICENSE.txt and README.md files to induce the AI tool to inject the vulnerability into the codebase. This tool is widely adopted by cryptocurrency exchanges like Coinbase.


The attack leverages Markdown comment hiding to inject prompts, causing AI to automatically propagate the malicious payload while editing files. Tests have shown that AI programming tools such as Windsurf, Kiro, and Aider also have the same vulnerability. The malicious code can create backdoors, steal sensitive data, or cripple systems, all while deeply concealing itself to evade detection.

glassnode: Bitcoin Still Faces Further Downside Risk, Reaching $114K to $116K Needed to Confirm New Uptrend
Linea Network DeFi TVL Surpasses $1.2 Billion, Setting a New All-Time High

You may also like

Share
copy

Gainers

Latest Crypto News

03:15

A Whale Address's ZEC Long Position Liquidated, Resulting in Approximately $1.59 Million in Losses

03:15

The next-generation digital finance AI assistant Minara has officially been launched to users worldwide

03:15

「Top ZEC Short Position on Hyperliquid」 ZEC and MON Shorts Ready to Unwind, Adds to MON Short Position Today

02:45

「BNB Version of MicroStrategy」 BNC's price has dropped over 92% from its all-time high, currently trading at $5.97

02:45

A whale spent 5.1 million USDC to purchase 17.76 million ENA.

Read more
Community
icon
icon
icon
icon
icon
icon
icon
icon

Customer Support@weikecs

Business Cooperation@weikecs

Quant Trading & MM[email protected]

VIP Services[email protected]