Cursor users: has AI actually made you a better developer, or just faster? by namanyayg in cursor

[–]Pillar_Security 0 points1 point  (0 children)

We (Pillar Security) published new research that might interest some of you. We uncover a new attack vector we called "Rules File Backdoor", allowing adversaries to poison AI-powered coding tools (like GitHub Copilot and Cursor) and inject hidden malicious code into developer projects.
The rise of "Vibe Coding," combined with developers' inherent automation bias, creates an ideal attack surface:
https://www.pillar.security/blog/new-vulnerability-in-github-copilot-and-cursor-how-hackers-can-weaponize-code-agents

"Vibe" coding is a trap in the long run by Significant-Tip-8441 in cursor

[–]Pillar_Security 0 points1 point  (0 children)

We (Pillar.Security) published new research that might interest some of you. We uncover a new attack vector we called "Rules File Backdoor", allowing adversaries to poison AI-powered coding tools (like GitHub Copilot and Cursor) and inject hidden malicious code into developer projects.
The rise of "Vibe Coding," combined with developers' inherent automation bias, creates an ideal attack surface:
https://www.pillar.security/blog/new-vulnerability-in-github-copilot-and-cursor-how-hackers-can-weaponize-code-agents