{"data":{"id":"9a3eba0a-e4a5-4270-bb23-4e945c098aa2","title":"Cursor security: top 10 attacks and what each one actually broke","summary":"A trojanized copy of the Claude Code extension was served from Cursor's own extension marketplace for about 11 hours in October 2026, and the incident has no CVE. Ten documented Cursor attacks between August 2025 and October 2026 are listed, and three high severity issues remain unfixed. The source argues that a risk register built only from CVE data misses the attacks that caused confirmed harm.","solution":"The source recommends a layered approach: turn on Workspace Trust, govern extensions and MCP installs as software supply chain, and put a runtime layer in front of agent actions so destructive actions, system compromise and data leaks are stopped before they land. Workspace Trust is off by default.","labels":["security","industry"],"sourceUrl":"https://adversa.ai/blog/cursor-security/","publishedAt":"2026-11-03T00:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["supply_chain","prompt_injection"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor","Claude Code","Railway"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-03T00:00:00.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"]}}