AI autonomously finds zero-day in Cursor, Antigravity & VS Code used by 50M+ devs
stanislavfort · x · 2026-09-08
AISLE's AI autonomously discovered a zero-day affecting Cursor, Google Antigravity, and Microsoft VS Code — tools used by 50M+ developers. Clicking a harmless-looking link in a commit message would open the expected page while silently stealing API keys and certificates and installing a persistent keylogger, with no security warning. The flaw is now fixed; the end-to-end exploit is detailed.
More from coding & agent
- OpenAI ships GPT-6.1 Terra; Brockman says its computer use now beats his own speed — gdb · 2026-10-27
- Kolab Benchmark Uses Pro Screen Recordings to Show AI Agents Overestimate Collaboration Quality — minnesotanlp · 2026-10-27
- Dev argues Claude burns far more tokens than GPT models for the same coding work — haider1 · 2026-10-27
- Stop building agents that can't change models: stable contracts, external state, real evals — rseroter · 2026-10-27
- Cheap models can cost more in agent harnesses than frontier ones, researcher warns — vasuman · 2026-10-27
- Kanzo: A 5k-Line Rust Kanban Binary With MCP for Claude Code and Codex — allmudi · 2026-10-27