Two critical Cursor IDE vulnerabilities, dubbed DuneSlide, let prompt injection break the editor's command sandbox with no click required. Both are fixed in Cursor 3.0.

Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a shared design failure, not just a single vendor mistake.

Amazon Q’s MCP Flaw Is an Industry Warning: AI Tools Still Lack Workspace Trust Standards on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.