I’ve been using Cursor for a while, but it prompted me to update. I used the update link and led me to cursor’s download page. I downloaded the following Windows installers:
CursorUserSetup-x64-3.8.24.exe
CursorUserSetup-x64-3.8.25.exe
Both of them trigger the Windows Defender stating that Microsoft Windows Defender SmartScan prevented an unrecognized app from starting. Running this app might put your PC at risk.
I’m running on an enterprise computer and I don’t want to take unnecessary risk of running some sort of malware.
Hi @avictor-ilm Thank you for the post! Thanks for flagging this, and for being cautious on a managed machine.
This is safe. It’s a Windows SmartScreen reputation prompt, not a malware detection. The Cursor installer is code-signed by Anysphere, Inc., but SmartScreen shows the “unrecognized app” warning for new releases until they build up download reputation, which is why both 3.8.24 and 3.8.25 triggered it.
To confirm before running: right-click the .exe → Properties → Digital Signatures. If you see a valid signature from Anysphere, Inc., you’re good to click More info → Run anyway.
For an enterprise/managed device, the most durable option is to have IT add a publisher/certificate-based allow rule (WDAC or AppLocker) for the Anysphere, Inc. certificate rather than a per-hash rule, since the hash changes every release. Deploying via your managed software channel (if you have one) also avoids the prompt entirely