Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...