Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Help Net Security

Claude Code extension poisoned with persistent SSH backdoor

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...
Cyber Security News

Weaponized Claude Code Extension Gives Hackers Persistent Remote Access to Developer Systems

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...
Microsoft

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

[Update Required] Critical Vulnerability in 'Brotli' | Check this if you installed Node.js for AI tools. How to verify and update

Hello, this is DreamTact DX Solutions.One week after the emergency PHP update, a critical vulnerability has been discovered in 'Brotli,' a data compression mechanism created by Google.You might think, ...
cyberpress

Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users

Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development ...

Creating Glass Ice and Water with Claude Code and Three.js: From Codex Images to Blender's Ideal

I created ice in a glass to view in a browser. This article is a record of how the ice and water in the glass reached their ...

Fixes for Google Brotli flaw arrive for Microsoft .NET, PHP and Linux

Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched ...