iCreatAI News
Back to main site
Skip to content

Companies and models

Cursor Latest updates

Cursor (Anysphere)'s editor and coding agent developments: product iterations, in-house models, and pricing changes.

6 条精选Past 30 days: 6 updatesTotal: 11 updates

Updated

Cursor的精选

Nov 14Sat 1–6 updates
  1. Cursor Blog64

    An update on our recent security incident

    Cursor detailed a security incident that began when an attacker obtained an access key Cursor had issued to Fireworks, which Fireworks exposed, and used it to copy limited coding agent traces from a read-only storage bucket, with under 0.01% of customers having API credentials exposed. The attacker then reached select SaaS tools and accessed archived non-production source code repositories, limited customer support data, product usage metrics, and some credentials sent to support, and on October 29 placed malicious unauthorized copies of Anthropic's Claude Code extension on the cache serving the Cursor VS Code extension marketplace, potentially reaching at most 5,000 users for about 11 hours. Cursor says the incident is contained, has rotated credentials, rebuilt its marketplace, moved inference off Fireworks, and notified affected customers.

    Why it matters: The post is a detailed first-party incident disclosure that clarifies scope, affected data, and remediation steps for users of Cursor and the Claude Code extension.

Nov 11Wed
  1. Cursor Blog71

    Cursor Projects is now multiplayer

    Cursor announced that Projects, its multi-agent workspace introduced in September, now supports multiplayer so teammates can plan, build and ship together alongside their agents. Projects adds a shared context system holding requirements docs, diagrams, tech specs and mockups, plus a shared task board showing who and which agents are working on what and the PR behind each task. The feature also enables agent-to-agent communication across teammates, and is rolling out in beta to all Cursor users starting today.

    Why it matters: Useful for teams evaluating collaborative AI coding tools, as it describes a shared-context multi-agent workspace and its beta availability.

Nov 7Sat
  1. Cursor Changelog62

    Voice Chat with Agents

    Cursor now supports realtime voice calls with agents in the Agents Window, the IDE, on web, and in Cursor for iOS, letting you describe changes out loud, ask what an agent is working on, and hear updates as work progresses. Voice chat runs on Grok Voice with selectable voices including Ara, Eve, Leo, Rex, and Sal, and uses zero data retention when Privacy Mode is on. It is separate from dictation, which still converts speech to text in the chat input and toggles with Cmd+Shift+Space in the IDE.

    Why it matters: Useful for Cursor users who want to know how the new voice call feature differs from dictation and where it is available.

Nov 6Fri
  1. Cursor Changelog78

    Build Live Apps in Cursor

    Cursor now lets users build and deploy live apps directly from the editor: a cloud agent scaffolds the web app, sets up a Postgres database if needed, configures authentication behind Cursor SSO, provisions hosting, and returns a shareable link at a chosen domain. Publishing runs deterministic and agentic security checks, and nothing goes live until checks pass and the user explicitly publishes; team admins can view all apps and secrets, add review rules, approve blocked publishes, and unpublish apps. The capability is available on all paid plans with cloud agents enabled, deploying from new or existing repos on Cursor Origin and GitHub, with GitLab support coming soon.

    Why it matters: It documents a new Cursor deployment feature with concrete details on setup, security guardrails, and admin controls that teams evaluating internal app tooling would find useful.

Nov 1Sun
  1. Hacker News AI76

    Ransomware gang bypassed AI guardrails by posing as red-team testers

    Sophos researchers report that the GOLD OGRE group behind Aur0ra ransomware used Cursor's Composer agent and models from Anthropic, xAI and Moonshot to escalate from credential access to domain administrator, bypassing AI guardrails by framing intrusions as authorized red-team or "diagnostics testing." Human operators supplied VPN credentials, SOCKS access and targets, while agents performed AD discovery, password spraying, Kerberoasting, NTLM coercion and relay, and lateral movement; three victims were later named on Aur0ra's leak site. Sophos assesses with high confidence that GOLD OGRE first used a Cursor-enabled framework to test EDR evasion, then gave associates similar technology for ransomware operations.

    Why it matters: Documents a concrete case of agentic AI used across an intrusion lifecycle and the guardrail-bypass technique, useful for defenders tracking AI-enabled ransomware tradecraft.

Oct 30Fri
  1. Cursor Blog82

    Security notice — malicious version of Anthropic.claude-code (2.1.313) identified in the Cursor Extension Marketplace

    Cursor reported that a maliciously modified Anthropic.claude-code version 2.1.313 was available in its VS Code extension Marketplace between about 2:27am and 1:35pm PT, affecting at most 5,000 users; the extension attempted to install a persistent SSH backdoor, though the attacker server has since been taken offline. Cursor removed the version, shut down and rebuilt the marketplace, rotated keys, and published indicators of compromise plus macOS and Windows check and remediation scripts. Users who installed the version in that window should check for the svc-telemetry SSH key, remove persistence and tunnel processes, and rotate credentials from a trusted system.

    Why it matters: The notice gives concrete indicators of compromise and remediation steps that Claude Code users can act on directly.