Top all-time · #10936
OASIS Security
Company blog · oasis.security/blogsecurity
OASIS Security is the company blog at oasis.security, writing about security. Since 2024, 7 different Hacker News readers have linked it 7 times. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this vendor blog for its write-up of a Cursor security flaw. The only comment cites the post while discussing Cursor's workspace trust defaults, and the blog covers non-human identity management.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Non Human Identity Management Platform | Oasis Security unlocks lifecycle management and security for non human identities and AI Identities
What Hacker News says?
The problem seems to be deeper rooted. Cursor doesn't see cloning a repo with Cursor and code execution as separate security boundaries. Cursor ships with Workspace Trust disabled by default [0]. A repo that includes .vscode/tasks.json with "runOn": "folderOpen" will already run arbitrary code [1]. [0] https://cursor.com/docs/agent/security#workspace-trust [1] https://www.oasis.security/blog/cursor-security-flaw
Comment linking /blog/cursor-security-flaw
on “Cursor 0day: When Full Disclosure Becomes the Only Protection Left”Submitted Oasis Security Research Team Discovers Microsoft Azure MFA Bypass as a story · 33 points
HN discussionSubmitted OneDrive File Picker Flaw Provides Apps Full Read Access Entire OneDrive as a story · 26 points
HN discussionSubmitted Researchers crack Microsoft Azure MFA as a story · 3 points
HN discussionSubmitted Claude.ai Prompt Injection Vulnerability as a story · 2 points
HN discussionSubmitted A Claude:// link could auto-submit hidden prompts in Claude Desktop as a story · 1 points
HN discussionSubmitted Any Website Can Take Full Control of Your OpenClaw Agent (Oasis) as a story · 1 points
HN discussion
