Cursor Security Incident: Leaked Fireworks Keys and LLM Transcripts Exposed Credentials

Cursor published a full postmortem: attackers exploited leaked Fireworks keys to copy Cursor's shared infrastructure and tamper with Claude Code, while stolen LLM transcripts containing static credentials fueled the breach. Vercel's CTO urged the industry to end long-lived secrets.

2026-11-14 ~ 2026-11-15 · 2 related posts

• Cursor breach traced to exposed Fireworks key: 0.01% credentials leaked, Claude Code extension swapped — AccBalanced · 2026-11-14
• Cursor breach leaked creds via stolen LLM transcripts; Vercel says kill static keys — jobergum · 2026-11-15