完全披露：Cursor 中的任意代码执行漏洞

🔑 核心要点

• Cursor 0day: When Full Disclosure Becomes the Only Protection Left - Mindgard Platform Platform Research Led.
• Enterprise Ready AI Discovery & Recon Discover shadow AI and agents.
• By creating a repository with a planted malicious git.exe in the root, the IDE will execute it with no user interaction and no prompting of the user.
• This occurs repeatedly on a cadence.
• Sometimes security research uncovers deeply technical vulnerabilities that require pages of explanation.

💡 金句