2-Click Cursor Exploit Enables Dev Environment Takeover

This DarkReading roundup highlights an escalation in high-impact threats across developer tooling, AI/agentic workflows, and infrastructure. Key items: multiple Cursor-related flaws (including a poisoned-repo auto-execution and a 2-click cursor exploit) that allow code execution and dev-environment takeover; 'GitLost' and Dialogflow CX flaws that leak data from agentic workflows and chatbots; Microsoft Patch Tuesday with multiple zero-days; FortiBleed access being monetized and a signed malicious kernel driver used by 'GodDamn' ransomware to disable security products; the LLM-driven 'JadePuffe