A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.