TECH NEWS

Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution

Two criticalvulnerabilities in the popular AI code editor Cursor could lead to remote code execution on the underlying operating system, Cato Networks reports.

The security defects are tracked as CVE-2026-50548 and CVE-2026-50549 (CVSS score of 9.8) and are referred to as DuneSlide, given that they lead to remote code execution (RCE) outside of the IDE’s sandbox.

According to Cato, the flaws abuse Cursor’s automatic terminal command execution inside the sandbox, which does not prompt the user for approval, and can be triggered when a victim prompts the IDE to ingest an attacker-controlled payload.

The first issue is related to the sandbox’s security boundaries. While command execution should be restricted to the current working directory, a non-default value assigned to the working_directory parameter results in the path being added to the allow list.

Thus, an innocuous MCP server request could inject a prompt that would instruct the LLM to...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

https://img-cdn.publive.online/fit-in/1200x675/ciol/media/media_files/2026/07/03/appointment-2026-07-03-12-12-14.png

Ramco Systems Appoints Sandesh Bilagi As CEO

Ramco Systems has named company veteran Sandesh Bilagi as its Chief Executive Officer, signalling a leadership transition centred on operational continuity and AI-led growth rather than a strategic reset. Bilagi, who previously served as president and chief operating officer, will assume the role after leading the company's operational

https://cdn1.expresscomputer.in/wp-content/uploads/2025/11/24153331/EC_04_Artificial_Intelligence_AI_Technology_750.jpg

AI Inference boom will trigger a 500% data center supply deficit by 2030

Iron Mountain, in partnership with Structure Research has issued their top 4 predictions for the impact of AI on Global Data Infrastructure. The predictions look at what shifts companies can expect to see in the market over the next five years. In the three years since ChatGPT launched, generative and

https://image.theregister.com/1683293.jpg?imageId=1683293&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

Databricks unifies OLTP and OLAP, depending on what counts as a copy

When Databricks claimed to have cracked an age-old database problem, it came with a clear marketing message: "One data, zero compromises, zero copies." Inevitably, that led engineers to search for clarity. After all, the company claimed to have unified OLTP and OLAP with "no data duplication."

https://media.thenextweb.com/2026/07/alibaba-600-million-doj-settlement-illegal-pharmaceuticals.avif

Alibaba to ban Claude Code over alleged backdoor risk, source says

The workplace ban, starting July 10, lands weeks after Anthropic accused operators linked to Alibaba’s Qwen lab of running the largest known distillation campaign against Claude. Alibaba will bar its employees from using Anthropic’s Claude Code inside workplace environments from July 10, according to a person familiar with

Read more

Ramco Systems Appoints Sandesh Bilagi As CEO

AI Inference boom will trigger a 500% data center supply deficit by 2030

Databricks unifies OLTP and OLAP, depending on what counts as a copy

Alibaba to ban Claude Code over alleged backdoor risk, source says