Your editor's preview browser is not a browser: auditing the EMBRACE trust boundary on your own workstation
This story is from 2026-10-30. It is preserved in the archive; the latest stories are on the live feed.
The preview pane inside Cursor, Copilot, Codex, VS Code, and Claude Desktop looks like a browser. On October 29, 2026, Forever Security's EMBRACE research (researcher Gal Weizman) showed it was trusted like one — and that the trust was misplaced. Two tools were unpatched at publication. This post i…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-30 20:52 · DEV Community — AI
Your editor's preview browser is not a browser: auditing the EMBRACE trust boundary on your own workstation