Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).