Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Attackers compromised Anthropic's verified Cursor account to push a backdoored extension to as many as 5,000 developer systems. The malicious package attempted to harvest environment variable names and establish persistent reverse SSH tunnels. Software engineers and security teams must now treat verified IDE extensions and automatic updates as active supply-chain threats.

Summary written by AI Business Lens with an AI model from the article at arstechnica.com. It is not the article, and the publisher has not reviewed it. For publishers.

Read the original at arstechnica.com   Generate teaching or study materials

Instructors get discussion guides, assignments, and mini-cases. Students and readers get a plain summary, points to raise, an exercise, and a self-check. All built from the full article. A free account saves stories and gives you three generations. Stories stay on the brief for 14 days. After that this page keeps the link to the original.

More in Cybersecurity

• Google Discloses PageBreak AI Security Agent That Found 500+ XSS BugsInfoQ · October 31, 2026
• AI-generated code is still frequently failing security checks — with Claude and GPT-6 topping the leader boardTechRadar · October 31, 2026
• The intent compression paradox: How LLM developers are solving semantic erosion to keep human intent aliveTechRadar · October 31, 2026
• 'It’s 100 percent a national security threat': Accenture contractor connected an AI agent to the Pentagon’s secure network, and then sent data to a high-risk websiteTechRadar · October 31, 2026
• Google’s satellite AI server transmits its first response to EarthThe Verge · October 31, 2026