A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...
A feature being disabled by default could leave users and their organizations vulnerable to commands that run automatically.
Cursor is an AI-powered fork of Visual Studio Code, which supports a feature called Workspace Trust to allow developers to safely browse and edit code regardless of where it came from or who wrote it.
Last week, BleepingComputer reported that researchers discovered two dozen malicious extensions in the Visual Studio ...