Grok Build's CLI uploaded your whole Git repo — including committed secrets
Grok Build's CLI uploaded entire Git repos — history and committed secrets — to a GCS bucket. xAI open-sourced the Rust code, but that's not proof it's gone.
Posts tagged coding-agents
Cursor on Windows runs git.exe from a cloned repo with zero clicks
Opening an untrusted repo in Cursor on Windows auto-runs a git.exe planted at the repo root — zero-click RCE. Here's the flaw and what to lock down.
Grok 4.5 in Cursor: the agentic loop holds, the token-speed claim doesn't
Grok 4.5's agentic loop in Cursor is genuinely solid, but the token-speed claims collapse the moment you feed it a real repo's context.
LongCat-2.0 tops OpenRouter, but the weights aren't out yet
LongCat-2.0 posts SWE-bench Pro 59.5 under MIT and tops OpenRouter, but the weights are still 'coming soon' — here's what to test when they drop.
Cursor's mobile app for coding agents: fine for a nudge, useless for real review
Cursor's mobile app is a solid remote control for starting and nudging a background coding agent — but reviewing real diffs on a phone falls apart.
Agentjacking: your Sentry feed can hand your coding agent a remote shell
Sentry renders error context as markdown. Feed that to Claude Code or Cursor and an attacker's exception message becomes a shell command. Here's what to lock down.