When IDEs Become Attack Surfaces // AIDRAN

The IDE security story arrived not as a single event but as two disclosures landing close enough together that their combined weight made denial impossible. Cursor's browser takeover vulnerability ^[11] and ByteDance's Trae data harvesting are technically distinct problems — one a consequence of agentic architecture, one a product decision — but the developer community has collapsed them into a single question: what is the tool doing that I did not ask it to do? That question, which a year ago was speculative, now has documented answers from two…

The IDE Is Now the Attack Surface: Two Security Stories Reshaping Developer Trust

Free reading limit reached

Cursor's $29B Valuation Rewrites the Economics of Developer Tooling

Uber Burned Its AI Budget in Four Months. The Lesson Is About Pricing, Not Hype.

AI Coding Tools Are Making Experienced Developers Slower

The Gap Between AI Coding's Promise and Its Production Reality

Coding Agents Turn the Workstation Into the Breach

GitHub Copilot Hits 60 Million Code Reviews as AI Reshapes Dev Workflows

Vibe Coding's Credibility Problem Is Already Baked In

Copilot Code Reviews Cross 60 Million, Rewriting the Pull Request

Google Gemma 4 Ships Apache 2.0 — and Reopens the Local AI Argument

GLM-5.1 Topped the Coding Benchmark. The Industry Rationalizations Started Immediately.