The zero-day that could’ve compromised every Cursor and Windsurf user
A security researcher from Koi Security stumbled upon a critical zero-day buried deep in the infrastructure powering today’s AI coding tools. Had it been exploited, a non-sophisticated attacker could’ve hijacked over 10 million machines with a single stroke. AI coding assistants like Cursor and Windsurf have exploded in popularity, promising…
bubmagJuly 11, 2025