Check Point researchers uncovered a remote code execution bug in popular vibe-coding AI tool Cursor that could allow an attacker to poison developer environments by secretly modifying a previously ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.

Analysts believe that all database vendors will soon start adding the Model Context Protocol to their offerings to aid developers with LLM app development. MongoDB has added Anthropic’s Model Context ...

However, approach with caution: MCP servers are increasingly becoming a new way to hijack systems or launch cyberattacks, research shows. Microsoft has added Model Context Protocol (MCP) support to ...