Cursor IDE’s deeplink handler has a problem. A crafted cursor:// link — the kind used to install MCP servers — can silently deploy an attacker-controlled server on a developer’s machine with one click and one dialog approval. The attack, called DeepJack, was disclosed by Adversa AI on July 15, 2026. It bypasses Cursor’s own fix for the previous deeplink vulnerability. As of build 3.9.8, it still works. How DeepJack Works The predecessor attack, CursorJack (CVE-2025-54133), abused the cursor://anysphere.cursor-deeplink/mcp/install endpoint directly. Cursor patched it in version 1.3 by surfacing the full command in the install dialog — so users could at […]
The post
source & further reading
byteiota.com — original article
Grok Build Uploaded Your Entire Git Repo. Now It’s Open Source.
OpenAI Atlas Shuts Down August 9: Migration Guide
OpenAI Astra: Multi-Agent Model Solves 10 Decade-Old Math Problems