Anthropic VS Code extension on Cursor backdoored for nearly 12 hours
Version 2.1.313, published on Anthropic’s official Cursor account, tried to install a persistent SSH backdoor on up to 5,000 machines.
76
Vendor
Cursor
- Mentions · 7d12
- Mentions · 30d13
- All mentions26
- First seenAug 18, 2026
- Last mentioned5h ago
Timeline
26 articles · newest firstMalicious Claude Code extension reached up to 5,000 Cursor users
A marketplace backdoor stayed live about 11 hours, but a design flaw stopped it on most devices.
76
Trojanized Claude Code extension for Cursor hit developers
Malicious version 2.1.313 stole data and, in a minority of cases, could give persistent privileged access.
76
Tampered Claude Code extension in Cursor marketplace stole host data
Cursor says the listing was live about eleven hours and may have reached 5,000 users before the marketplace was taken offline.
74
Tampered Claude Code extension on Cursor planted an SSH backdoor
Version 2.1.313 was downloadable for about 11 hours and could have reached up to 5,000 developers; official Anthropic channels were not affected.
74
Malicious Claude Code extension on Cursor planted SSH backdoors
Version 2.1.313 was listed for about 11 hours on October 29 and may have reached 5,000 developers.
74
GOLD OGRE used Cursor agents to reach domain admin for Aur0ra
Sophos says three networks where agents gained domain management later appeared on the Aur0ra leak site.
76
GOLD OGRE automated Aur0ra intrusions with Cursor and Claude
Agents moved from stolen VPN access to domain management, and three of those victims later hit the leak site.
74
Embedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop flawed
Forever Security’s EMBRACE findings show prompt injection, address spoofing, and local file reads; Codex and VS Code were still unpatched.
74
Malicious Claude Code VS Code extension installed an SSH backdoor
Cursor says at most 5,000 users got version 2.1.313 on October 29; Anthropic replaced it with 2.1.314.
78
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
74
Cursor releases Agent SDK for code-defined agents
Teams can define agents in TypeScript and Markdown, run evals, and deploy them to Cursor or their own Node process.
42
Writing code by hand is over, forever
An engineer says Claude Opus 4.5 in Claude Code ended his 18-year habit of writing code by hand.
28
Portnox detects and removes unauthorized AI applications from managed devices
Portnox introduced a tool to automatically detect and remove unauthorized Shadow AI applications from managed devices to enforce security policies.
50
Hackers Weaponize Terraform Lock Files to Infect DevOps Engineers With macOS Backdoors
North Korea-linked TraderTraitor uses weaponized Terraform lock files in fake job-interview GitHub repos to deploy FLATROOF and ROOFDECK macOS backdoors on DevOps engineers.
80
Business Survival in the Age of AI
Oasis Security executive argues enterprises need 'least agency' controls for AI agents, citing a Cursor agent's nine-second production database deletion and Claude Desktop flaw.
28
Underwriting Superintelligence: Backing Agents you can Sue — Rune Kvist, AIUC
AIUC raised a $40 million Series A to build AIUC-1, an agent security standard backed by insurance, serving Cursor, Harvey, Lovable, and ElevenLabs.
45
Hackers are stealing Claude tokens from subscribers
Infostealer malware is stealing Claude login sessions, letting attackers mint OAuth tokens and burn subscribers' paid usage largely undetected.
55
Cognition hits $48B valuation, signaling investors believe AI coding is far from a winner-take-all market
Cognition, maker of Devin, raised $2 billion at a $48 billion valuation led by a16z, Accel, and Founders Fund, with revenue at $900M annualized.
60
OpenClaw Power, MacBook Simplicity: Five Days With Grok Bot
Hands-on review finds Grok Bot simplifies agent setup via browser logins and bot abstraction, contrasting with the user-owned OpenClaw platform.
38
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Aurora ransomware operators used Cursor AI running Claude Sonnet to plan and execute intrusions against dozens of organizations in nine countries.
68
[AINews] OpenAI shuts off Cursor
OpenAI cut off API access to coding tool Cursor after its SpaceX acquisition, citing contract violations by Elon Musk's companies.
55
Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations
Aurora ransomware operators are using SpaceX-owned Cursor's AI agent to perform reconnaissance and exploitation tasks during intrusions.
55
Our decision on Cursor following its acquisition by SpaceX
OpenAI is winding down its contract supplying models to Cursor after Cursor's acquisition by SpaceX.
58
One in four MCP servers opens AI agent security to code execution risk
Noma Security whitepaper finds most popular AI Skills and many MCP servers carry high-risk capabilities, with state changes most prevalent.
62
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
A weekly bulletin aggregating short security updates, including the City-Forum data-theft campaign, a ShipMonk breach, a Cursor CLI flaw, and GhostJacking AI attacks.
30
Appears with
- Anthropicvendor · 19
- Claude Codeproduct · 8
- OpenAIvendor · 8
- Codexproduct · 5
- SpaceXorganization · 5
- Cursorproduct · 5
- Claude Desktopproduct · 3
- Claudeproduct · 3
- OpenSourceMalwareorganization · 3
- Microsoftvendor · 3
- Phorionorganization · 3
- GitHubvendor · 3
- Aurorathreat actor · 2
- Noma Securityorganization · 2
- Sophosorganization · 2
- Forever Securityorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.