Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-05-10 · source-backed
OX Security weaponized CVE-2025-7656 (a patched Chromium flaw) against current versions of both IDEs, proving their Electron builds ship Chromium engines frozen since March 2025. At least 94 known CVEs have accumulated since. Cursor dismissed the report as "out of scope." Windsurf didn't respond. If you're building in either IDE, you're running a browser with 14 months of unpatched vulnerabilities. That's your entire dev environment.
Each link below shares sources, entities, or timing with this story.
The Amazon Q bug is one instance of a 2026 pattern: MCP configuration carried in repositories is now an RCE supply-chain vector, not just untrusted tool output. Cursor, VS Code, Windsurf, Claude Code, and Gemini-CLI are all vulnerable to MCP-based auto-launch attacks (Windsurf...
— Security researcher Ari Marzouk disclosed 30+ vulnerabilities (24 CVEs) affecting Cursor, GitHub Copilot, Windsurf, Zed, Kiro, Roo Code, Junie, and Cline. The devastating finding: every tested AI IDE is vulnerable because none accounts for autonomous LLM agent behavior in th...
Israeli cybersecurity startup RedAccess found 380,000 apps built with Lovable, Replit, Base44, and Netlify publicly accessible with virtually no security. About 5,000 of those are actively leaking medical records, financial data, customer chatbot logs, and corporate secrets. D...
Zed launched Parallel Agents on April 22. One agent refactors your backend. Another updates the frontend. A third writes tests. All running simultaneously in the same editor window. No tab switching, no separate terminals, no worktree juggling. Nobody else does this. Cursor ru...
Warp released its client codebase under AGPL-3.0, surged to 56,000 GitHub stars and #2 on GitHub Trending. But the real story isn't the open-sourcing. It's the repositioning. Warp isn't calling itself a terminal anymore. It's an "agentic development environment." The product n...
Adversa AI's March 2026 roundup documented 8 confirmed security incidents across OpenClaw and ServiceNow deployments, with aggregate scanning finding 43% of MCP servers vulnerable to command execution. A new vulnerability class is emerging around persistent memory and SOUL.md...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.