A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to developers' computers, putting sensitive files and credentials at risk. Cursor ...

A few days after saying goodbye to WordPress and replacing my blog functionality with Cryogen, I discovered it has an amazing ...

Hackers infected 953 online stores with JavaScript loaders hidden in Magento CMS blocks, using bot filtering to evade security scanners.

I have summarized security measures for iOS app development.1. IntroductioniOS is equipped with powerful security features at ...

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access tokens.

TypoPrompting exploits mistyped AI website addresses to redirect users to fake pages that deliver malware and browser hijackers.

Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider ...

Kaspersky Lab has detected attempts to infect computers with the WebRAT (Salat Stealer) trojan when visiting certain Telegram ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

Attackers used credentials stolen from Fireworks AI to access Cursor systems and distribute malicious copies of Anthropic’s ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to ...