Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
finance.biggo

Malicious Claude Code Extension on Cursor Marketplace Hid SSH Backdoor, Up to 5,000 Users Exposed

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
Visual Studio Magazine

Microsoft Tests Whether 'Eval' Folder Names Change AI Agent Behavior

Experiments with GitHub Copilot CLI found greater test awareness but no statistically significant change in agent behavior.
Help Net Security

Claude Code extension poisoned with persistent SSH backdoor

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...

I tried running Strata on an old custom-built PC with a 14-year-old CPU by plugging in an RTX 3060

The motivation behind thisI had been running Strata, which powers Qwen3.8 Flash Next, on two of my home-built PCs and using ...
xenospectrum

GitHub Octoverse 2026: AI Agents Now Start Over 40% of Pull Requests as Surging Load Strains Infrastructure

GitHub's annual Octoverse 2026 report shows agents initiating about 40% of pull requests. It also shows how 7.4 billion ...
qa-financial

SmartBear, Harness and Cognition: the latest vendor news

QA Financial rounds up the latest vendor announcements affecting software quality, testing, audit evidence and operational ...
orcarouter.ai

CVE-2026-111497: One Brotli Bug, Nine Runtimes, and the Codex Agent That Found It

One Brotli decompression bug is reachable through Node, .NET, Python, Bun, Envoy and Istio. The patch matrix and what to do ...