PrivSec Lab wrote
Jul 3, 2026 in ai-coding - Cato AI Labs disclosed two critical Cursor flaws nicknamed DuneSlide (CVE-2026-50548 and CVE-2026-50549, CVSS 9.8). They allow zero-click remote code execution via indirect prompt injection. Here is how they work and why they are already fixed in Cursor 3.0.
Read more…PrivSec Lab wrote
Jul 3, 2026 in ai-coding - Anthropic has brought Claude Fable 5 back with new cybersecurity safeguards and shared a jailbreak severity framework. Here is what came back, the safety classifiers, the four severity criteria, and what Anthropic has promised.
Read more…PrivSec Lab wrote
Jul 2, 2026 in ai-coding - Z.ai has launched ZCode, a free agentic coding tool powered by GLM-5.2 that undercuts Cursor and Claude Code on price. Here is what ZCode is, who it is for, how it compares, and how the GLM Coding Plan pricing works.
Read more…PrivSec Lab wrote
Jul 2, 2026 in ai-coding - Kimi K2.7 Code is now generally available in GitHub Copilot, and it is the first open-weight model you can pick in the Copilot model picker. Here is who gets it, why the open-weight, lower-cost angle matters, and how billing and enablement work.
Read more…PrivSec Lab wrote
Jun 30, 2026 in ai-coding - Claude Sonnet 5, Anthropic's newest Sonnet-class model, is now generally available in GitHub Copilot. Here is who gets it, what it is good at for everyday and agentic coding, and how it fits alongside the other Claude options.
Read more…PrivSec Lab wrote
Jun 30, 2026 in ai-coding - Claude Opus 4.8 fast mode is now in preview for GitHub Copilot - same model, much faster output. Pricing is $10/M input and $50/M output tokens, roughly 2.5Ă— faster and ~3Ă— cheaper than fast mode was for previous models. Here's who gets it and when to use it.
Read more…PrivSec Lab wrote
Jun 29, 2026 in ai-coding - Running a large language model locally means your prompts and data never leave your machine - unlike ChatGPT, Claude or Gemini, where input is sent to the provider's servers. Which open-weight models and tools to choose for privacy, the hardware you need, and the honest trade-offs versus cloud.
Read more…PrivSec Lab wrote
Jun 28, 2026 in privacy-tooling - Honest IVPN vs Proton VPN comparison for privacy-first users: jurisdiction (Gibraltar vs Switzerland), free plan, network size, multi-hop, independent audits, open-source clients, and anonymous payment. A balanced verdict, not a sales pitch.
Read more…PrivSec Lab wrote
Jun 27, 2026 in privacy-tooling - Is Cursor AI safe to use? How the AI code editor handles your code, what Privacy Mode actually does, the difference between Free, Pro and Business plans, and how to use Cursor more safely with sensitive code.
Read more…PrivSec Lab wrote
Jun 26, 2026 in privacy-tooling - Is DeepSeek safe to use? The cloud app and the open-weight model are two very different answers. What DeepSeek does with your data, why regulators raised concerns, and the private way to use it.
Read more…Browser security
What your browser exposes, and which countermeasures actually work.
Read the research →Network privacy
Where your traffic leaks, and how to verify it yourself.
Read the research →Tooling
Independent benchmarks - no sponsorships, no marketing fluff.
Read the research →