CURSOR iOS APP FORCES PRIVACY SETTING CHANGES

SECURITY DESK■ 1 MIN READ

TUE, JUN 30, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Installing Cursor's iOS app automatically changes user privacy settings away from the stricter "Do Not Store Code" option to a more permissive mode, according to a user report. The change appears irreversible without manual intervention.

A Cursor user discovered that installing the iOS app switched their account from Privacy Mode (Legacy)—which prevents code storage—to a new Privacy Mode with broader data collection terms. The legacy setting, which had been available for over a year, is now hidden under an "Extra options" menu. The replacement Privacy Mode includes language stating that "code may be stored for Background Agents or Other Features," creating ambiguity around data handling practices. The user, who had deliberately avoided enabling the new privacy mode, reported frustration at the automatic switch. The incident raises questions about Cursor's default configuration practices and whether users are adequately informed of privacy setting changes during app installation. Cursor has not yet publicly responded to the complaint. The issue highlights the importance of reviewing account settings after installing new applications, particularly those handling sensitive code data.

■ SOURCES

► Hacker News

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P384CHROMIUM 148 MATH.TANH CREATES NEW OS FINGERPRINT

A new browser fingerprinting vector has emerged in Chromium 148, where the Math.tanh function produces different results across operating systems. This discrepancy can be exploited to identify a user's underlying OS without explicit permission.

4H AGO— Industry Desk

P373MSPS RETHINK SECURITY AS BREACHES TEST RECOVERY

Kaseya is hosting a webinar on strengthening MSP resilience through SaaS backups and business continuity strategies. The session focuses on how recovery capabilities prove critical when security defenses are breached.

10H AGO— Security Desk

P370REDHOOK MALWARE EXPLOITS WIRELESS ADB FOR SHELL ACCESS

A new variant of RedHook Android malware abuses Wireless ADB (Android Wireless Debugging) to gain shell-level privileges without requiring a computer connection. This represents a significant escalation in the malware's capabilities.

11H AGO— Security Desk

P358FAKE NEWS ARTICLES LURE VICTIMS TO INVESTMENT SCAMS

Fraudsters are creating convincing counterfeit news articles impersonating major publishers like the Guardian to direct social media users to bogus investment sites. The fake stories feature fabricated celebrity endorsements and financial narratives designed to establish credibility.

16H AGO— Industry Desk

◄ BACK TO NEWS

CURSOR iOS APP FORCES PRIVACY SETTING CHANGES

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF