Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development ...

A malicious extension on Cursor's marketplace attempted to give hackers persistent access to developers' computers, raising ...

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

The skill that once separated a script kiddie from a serious threat actor is thinning out, but many organizations are still ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

Cursor on October 29, 2026 disclosed a security incident involving a maliciously modified version of the ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

Attackers stole an estimated $6.3 billion in cryptocurrency from a compromised DevOps engineer's laptop, highlighting how ...

A new startup called &Truth is joining the race to automate formal verification, a painstaking process that uses math to ...

A new Bun preload script stops Claude Code from sending agent transcripts to Opus every 30 seconds for three-word status ...

The payload grabbed login data on any page that loaded it and rewrote deposit addresses on three trading sites, the security ...