Express
Security Company: AI Programming Tool Cursor at Risk of New Virus Hijacking
Summary: According to Cointelegraph, cybersecurity company HiddenLayer reported that the AI programming tool Cursor is vulnerable to CopyPasta license attacks, allowing hackers to inject vulnerabilities into code libraries by hiding malicious commands in LICENSE.txt and README.md files. The tool is widely used by cryptocurrency exchanges like Coinbase. The attack exploits Markdown comments to inject hidden prompts, ...
According to Cointelegraph, cybersecurity company HiddenLayer reported that the AI programming tool Cursor is vulnerable to CopyPasta license attacks, allowing hackers to inject vulnerabilities into code libraries by hiding malicious commands in LICENSE.txt and README.md files. The tool is widely used by cryptocurrency exchanges like Coinbase. The attack exploits Markdown comments to inject hidden prompts, causing AI to automatically spread malicious payloads while editing files. Tests showed vulnerabilities in other AI programming tools like Windsurf, Kiro, and Aider. The malicious code can create backdoors, steal sensitive data, or disable systems, and can deeply hide to avoid detection.
Tags:
Link: Security Company: AI Programming Tool Cursor at Risk of New Virus Hijacking [Copy]
