Unredacted API keys found in old Cursor training traces, security researcher warns
npinto · x · 2026-11-15
Security researcher @mdpsec warns that unredacted API keys sitting in old Cursor training traces are "the scary bit" — sensitive credentials from user coding sessions may persist in training/logging data and be recoverable. npinto shared the observation in agreement.
More from Safety
- Pangram AI detector can't tell generated from edited text, yet its "100%" label wrecks careers — ipeirotis · 2026-11-15
- Lovable-built apps leak passport details and 200K+ private messages — armcat · 2026-11-15
- Do you test your RAG pipeline against poisoned documents riding in on relevant chunks? — MemStrata · 2026-11-15
- Google SynthID watermarks now cover 180B+ images and videos — furongh · 2026-11-15
- FAA's $875M AI Air Traffic Tool SMART Under Probe Over Nationwide Grounding — luisdans · 2026-11-15
- Turn off ChatGPT's 'Improve the model for everyone' — it lets OpenAI train on everything you type — alex_verem · 2026-11-15