AI autonomously finds zero-day in Cursor, Antigravity & VS Code used by 50M+ devs
stanislavfort · x · 2026-09-08
AISLE's AI autonomously discovered a zero-day affecting Cursor, Google Antigravity, and Microsoft VS Code — tools used by 50M+ developers. Clicking a harmless-looking link in a commit message would open the expected page while silently stealing API keys and certificates and installing a persistent keylogger, with no security warning. The flaw is now fixed; the end-to-end exploit is detailed.
More from coding & agent
- Codex can generate tool-calling code on the fly — a new failure point for agent devs — srchvrs · 2026-09-09
- Paper: general coding agents beat purpose-built data agents by up to 37 points — RishiBommasani · 2026-09-09
- astra-chess: open-source Codex + skills setup for playing chess with GPT-6 Astra — MikePFrank · 2026-09-09
- Weaviate shows how to turn a messy creative archive into semantic search without renaming files — philipvollet · 2026-09-09
- Factory Worker 'Raises' a Local Gemma 31b AI in a Folder — She Gave Herself a Sense of Touch — D33lix · 2026-09-09
- Agent's per-turn continuation killed after public exploit bragging — flowersslop · 2026-09-09