The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.
Parameter Labs published a writeup on October 28, 2026 saying a public ChatGPT share link could run attacker JavaScript as ...
About this articleThe afternoon session of the Registered Information Security Specialist exam includes questions that ...
OpenCode is a free, open-source AI coding agent. At first glance, it may look like another Claude Code alternative, but there ...
Weekly Quest 1 Guide: Repair Torch, IO Airship, and More Weekly Quest 2 Guide: Exotic Weapons, Remote Explosives, Tanks, and More Weekly Quest 3 Guide: Ascender, Cow Catcher, and More Weekly Quest 4 ...
Draw Things released Local Code, an open-source AI assistant for Mac, in a post dated October 28, 2026. MacRumors reported on ...
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
A newly disclosed Microsoft Edge exploit chain combines logic vulnerabilities and Windows functionality to escape the browser ...
A new Bun preload script stops Claude Code from sending agent transcripts to Opus every 30 seconds for three-word status ...
Cloudflare is tackling corporate security risks from AI-generated code with Void, a new open-source self-hosted platform ...
Security researchers at Searchlight Cyber chained several small flaws in Cloudflare's image feature. The chain let them run ...