Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-05 · source-backed
Microsoft researchers detailed SymJack, a symlink-hijack RCE affecting six coding agents, and TrustFall, which impacts Claude Code, Cursor, Gemini CLI, and GitHub Copilot (Microsoft Security). These join Semantic Kernel prompt-injection-to-host-RCE flaws. The local coding agent is now a prime attack surface, not a sandboxed toy. Audit filesystem and symlink handling in anything you run with shell access.
Each link below shares sources, entities, or timing with this story.
Cursor supports Claude / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor supports Claude); both cover Claude Code, Cursor, Gemini CLI, RCE; overlapping topics (agent, claude, code, coding, cursor).
Cursor benchmarked against Codex / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor benchmarked against Codex); both cover Claude Code, Cursor, Gemini CLI, GitHub Copilot; overlapping topics (agent, code, cursor).
Cursor partners with AWS / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor partners with AWS); both cover Claude Code, Cursor, Gemini CLI, GitHub Copilot; overlapping topics (agent, claude, code, coding, copilot).
Cursor uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor uses MCP); both cover Audit, Claude Code, Microsoft, RCE; overlapping topics (agent, attack, audit, chain, code).
Figma supports Cursor / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Figma supports Cursor); both cover Claude Code, Cursor, GitHub Copilot, Microsoft; overlapping topics (agent, claude, code, copilot, cursor).
Cursor benchmarked against Codex / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cursor benchmarked against Codex); both cover Claude Code, Cursor, GitHub Copilot; overlapping topics (agent, claude, code, coding, copilot).
chrome-devtools-mcp supports Cursor / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (chrome-devtools-mcp supports Cursor); both cover Claude Code, Cursor, Gemini CLI, GitHub Copilot; overlapping topics (agent, code, coding).
Cursor competes with GitHub Copilot / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor competes with GitHub Copilot); both cover Cursor, GitHub Copilot, RCE; overlapping topics (affecting, agent, attack, chain, code).