#arbitrary-code-execution

[ follow ]
#cursor #workspace-trust #supply-chain-attacks #cve-2025-43300 #image-io #zero-day
Information security
fromThe Hacker News
21 hours ago

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

Cursor's default-disabled Workspace Trust allows VS Code-style autorun tasks to execute on folder open, enabling arbitrary code execution and potential credential theft.
Apple
fromIT Pro
3 weeks ago

Apple just released an emergency patch for a zero-day exploited in the wild - here's why you need to update now

Critical Image I/O zero-day (CVE-2025-43300) enables arbitrary code execution via malicious images on iPhone, iPad, and Mac; install the emergency update immediately.
[ Load more ]