Security & Privacy
Cursor's Wildcard CORS Blunder: 80% of AI-Generated Backends Are Vulnerable
Audited 25 Cursor projects last quarter: 20 had wildcard CORS in prod. That's not a bug—it's baked into AI training data, and it's handing attackers your users' sessions on a platter.