The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
Parameter Labs published a writeup on October 28, 2026 saying a public ChatGPT share link could run attacker JavaScript as ...
About this articleThe afternoon session of the Registered Information Security Specialist exam includes questions that ...
OpenCode is a free, open-source AI coding agent. At first glance, it may look like another Claude Code alternative, but there ...
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...
Draw Things released Local Code, an open-source AI assistant for Mac, in a post dated October 28, 2026. MacRumors reported on ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
A script associated with performance monitoring contains code to access trading sessions, sell positions, and redirect assets ...
Veracode today announced a jump from 56% to 62% in overall AI-generated code security — the most significant improvement since 2025.
A newly disclosed Microsoft Edge exploit chain combines logic vulnerabilities and Windows functionality to escape the browser ...