Cursor Issue Paves Way for Credential-Stealing AttacksResearchers discovered a security weakness in the AI-powered coding tool that allows malicious MCP server to hijack Cursor's internal browser. November 17, 2025