Cursor Account Hijacked, Vercel Blocks a CVE by Default

A Cursor account got hijacked and burned 170M tokens overnight. Vercel now blocks a vulnerable package by default and locks down sandbox… Continue reading on Medium »