by Knostic Team

Deep Dive: Cursor Code Injection Runtime Attacks

A JavaScript injection attack on Cursor, facilitated by a malicious extension, can take over the IDE...

5 November 2025

research findings

by Knostic Team

Detecting GlassWorm with YARA Rules

We’ve published YARA signatures to detect GlassWorm, a self-propagating worm first reported by Koi S...

27 October 2025

research findings

by Knostic Team

Zero Width Unicode Characters: the Risks you Can't See

Developers read what they see, but not everything in code is visible. Zero-width Unicode characters,...

21 October 2025

research findings

by Knostic Team

Primer: How to Spot and Analyze Malicious VS Code Extensions

Practical methods to identify, inspect, and defend against compromised IDE extensions that turn deve...

19 October 2025

research findings

by Knostic Team

Open Marketplaces: The Good, the Bad, and The Dangerous

Compromised extensions remain public even after exposure, showing how open marketplaces can be abuse...

19 October 2025

research findings

by Knostic Team

New Malware, New Problems for IDEs and AI Coding Agents

A new malware campaign shows how vulnerable IDEs and AI coding agents have become as part of today’s...

19 October 2025

research findings

by Shayell Aharon

99% of Publicly Shared AI Chats are Safe, New Study Finds

A new analysis by Knostic shows that public AI use is overwhelmingly safe, and mostly about learning...

9 October 2025

research findings

by Knostic Team

Prompt||GTFO Season 1 AI Security Conversations

If you've been wondering what happens when cybersecurity professionals stop theorizing about AI thre...

24 September 2025

research findings

by Shayell Aharon

GPT-5 “Retry” Behavior and Cross-Session Context Contamination

In AI security, small interface features can sometimes surface unexpected behaviors. Our research te...

14 August 2025

research findings