Cursor published the infrastructure story behind their cloud agent deployment, including the concrete result that agents went from authoring roughly one in ten merged PRs to more than half. The investment wasn't in models or prompts but in environment quality: a tailored Dockerfile, a simplified build abstraction, and a self-healing automation called Cloud Doctor.
Two independent security disclosures landed within hours of each other about Cursor IDE: Mindgard's finding that Cursor auto-executes any git.exe in a repo root (still unpatched after 7 months) and Cato Networks' DuneSlide research showing that prompt injection via MCP or web search can escape the agent sandbox and achieve full OS-level RCE. Together they define a new class of attack surface that appears whenever an AI agent runs with your privileges.