Arun ArumugamAgent Engineering

Feed

Cursor breach traced to a leaked vendor key and agent traces

A quiet Saturday for releases. Cursor published the root cause of its October breach: agent traces shared with a training vendor carried credentials that opened the door to its internal tools and the fake Claude Code extension.

  1. CursorNewsSecurityCursor traces its breach to a leaked Fireworks key and old agent tracesAgent traces shared with a training vendor held unredacted credentials, which let the attacker reach Cursor tools and plant the fake Claude Code extension. A clear case for scrubbing secrets from agent logs before they leave your systems.