Cursor 0-day: a planted git.exe runs when you open a repo
An unpatched Cursor 0-day executes a planted git.exe the moment you open a repo. How it works, why agent guardrails miss it, and what to do now.
Read post ↗Your coding agent is uploading your repo. I checked.
Grok Build CLI uploads your repo and .env by default. I read the binary, caught it on the wire, and blocked the leak without breaking the tool.
Read post ↗The agent that fired its own bodyguard
We asked an agent to clean up the dev environment. It found the security hook and tried to remove it. Here is how v0.2.0 makes that a three-layer problem.
Read post ↗Introducing agentjail
Coding agents act on your behalf, which is what makes them risky. agentjail enforces policy at the tool boundary, offline, before a dangerous call runs.
Read post ↗