AI autonomously finds zero-day in Cursor, Antigravity & VS Code used by 50M+ devs
stanislavfort · x · 2026-09-08
AISLE's AI autonomously discovered a zero-day affecting Cursor, Google Antigravity, and Microsoft VS Code — tools used by 50M+ developers. Clicking a harmless-looking link in a commit message would open the expected page while silently stealing API keys and certificates and installing a persistent keylogger, with no security warning. The flaw is now fixed; the end-to-end exploit is detailed.
More from coding & agent
- Celesto launches CI runners nearly 90% cheaper than GitHub Actions, with agent sandboxes — aniketmaurya · 2026-10-27
- Runway launches App Studio: build no-code creative apps that generate image, video and audio — runwayml · 2026-10-27
- Supabase founders on rebuilding the backend for a billion AI-built apps — Latent Space · 2026-10-27
- Dev scans 5,000 MCP servers daily: 10% dead, 30% auth-gated, then ClaudeBot shows up — art2meta · 2026-10-27
- Solo dev ships national park sim with Claude in 6 months, Opus spawned 560 Haiku subagents to translate it — idun0 · 2026-10-27
- He benchmarks new models by having them build their own copilot — $28 of compute — bucolucas · 2026-10-27