Bug in Cursor Allows Simple RCE
This exploit occurs entirely in the background, requiring no user approval, dialogue prompts, or interaction.
Author Bio
Dennis Fisher
Editor
Dennis Fisher is an award-winning journalist and author. He is one of the co-founders of Decipher and Threatpost and has been writing about cybersecurity since 2000. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. He is the author of 2.5 novels and once met Shaq. Contact: dennis at decipher.sc.
Featured Articles
The Nasty Bug in AI Coding Assistants, macOS Malware Tipping Point, and AI-Enabled Phishing Kits
We’re back from a fun July 4th break, and this week’s news brings us the emergence of a nasty bug in many AI coding assistants, the approaching tipping point for macOS malware, and how AI-enabled phishing kits are changing the game. Plus: Some weird news about a former ransomware negotiator who was working with threat […]
Researchers Find New GhostApproval Bug in Many AI Coding Assistants
The bug is a modern twist on a Clinton-era piece of known Unix badness: following symbolic links.
Chinese APT UAT-7810 Expands Malware Arsenal
The investigation into UAT-7810 shows significant evolution in their toolkit, specifically the development of a successor to their previously documented SHORTLEASH backdoor.
Fable 5 Export Controls, the Dual Use Paradox, and the ARToken Phishing Framework
It’s a pre-July 4th extravaganza! To celebrate, we dive into a little cybersecurity history with a story about the MySpace Samy worm, then we jumpe into the news of the week, including an update on the Fable 5 export control drama, and the emergence of the ARToken operator panel. Links ARTokens story: https://decipher.sc/2026/06/26/new-turla-stockstay-backdoor-emerges/ Scattered Spider […]
Evil Is as Evil Does: New EvilTokens Affiliate Panel Uncovered
This new ARToken operator panel has a clear lineage going back to the EvilTokens framework, which emerged in early 2026.