English translation is being prepared.
Matched fieldsBody
←Search results
English text is being prepared.
Cato AI Labs discloses two zero-click prompt injection RCE vulnerabilities in Cursor IDE
Cato AI Labs discovered two remote code execution vulnerabilities in Cursor IDE that can lead to sandbox escape, both with a CVSS score of 9.8, tracked as CVE-2026-50548 and CVE-2026-50549. The two vulnerabilities stem respectively from the working_directory parameter of run_terminal_cmd being blindly added to the sandbox writable list, and from the fallback logic when symlink canonicalization fails; attackers can overwrite the cursorsandbox binary through zero-click prompt injection in an MCP server or web search results, achieving non-sandboxed RCE. The Cursor team fixed both issues in Cursor 3.0, released on April 2.
Cato AI Labs discovered two remote code execution vulnerabilities in Cursor IDE that can lead to sandbox escape, both with a CVSS score of 9.8, tracked as CVE-2026-50548 and CVE-2026-50549. The two vulnerabilities stem respectively from the working directory parameter of run terminal cmd being blindly added to the sandbox writable list, and from the fallback logic when symlink canonicalization fails; attackers can overwrite the cursorsandbox binary through zero-click prompt injection in an MCP s
Matched fieldsBody
Anthropic Releases Sixth Economic Index Report: Analysis of Claude Usage Rhythms and Artifacts
Anthropic released its Economic Index report, switching to privacy-preserving telemetry data sampled continuously each day, making hourly usage patterns observable. The report shows that the share of personal-use conversations rose from about 35% on weekdays to nearly 50% on weekends, recipe requests peaked at 2.3 times at 6 p.m., and tax-related conversations on April 14 were 8 times those of an average day in May. The report also classifies conversations by artifact; artifacts were identified in 93% of conversations, of which explanations accounted for 17% and documents and reports for 15%.
Anthropic released its Economic Index report, switching to privacy-preserving telemetry data sampled continuously each day, making hourly usage patterns observable. The report shows that the share of personal-use conversations rose from about 35% on weekdays to nearly 50% on weekends, recipe requests peaked at 2.3 times at 6 p.m., and tax-related conversations on April 14 were 8 times those of an average day in May. The report also classifies conversations by artifact; artifacts were identified
Matched fieldsBody
English translation is being prepared.
Matched fieldsBody