Security Cursor says seven-month unresolved bug is not its responsibility Noah Bovenizer Jul 16, 2026 2 min read