Anthropic VS code extension on Cursor backdoored for nearly 12 hours
2026-10-31T08:51:39Z•08890a8bd4164e6bd58538f798bd3ebb2ef7892462b12f38843ef491c16bbd1b
CursorDHSEDK2ICEIoT security incident orchestrationerror? Let's fix JSON. Need cNorth KoreaPHPPlexSSH interceptionTLS certificatesTorUEFIVS Code extensionbackdoorcertificate authority compromisecryptocurrency theftcybersecurity newsdata breachemail interceptionmalwaremercenary spywarephishingremote code executionsoftware supply chain compromisezero-click exploit
What happened
RSS feed aggregating October 2026 cybersecurity reports, including suspected software supply-chain compromise of an Anthropic Cursor/VS Code extension, major cryptocurrency theft, sensitive government data exposure, critical UEFI and PHP vulnerabilities, TLS certificate authority compromises, Tor infrastructure hijacking, exploited Plex flaws, mercenary spyware delivery, IoT attacks, and emerging risks in AI agents and MCP communications. The feed contains multiple potentially critical incidents, but most entries lack CVE identifiers and detailed technical confirmation.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 08890a8bd4164e6bd58538f798bd3ebb2ef7892462b12f38843ef491c16bbd1b
- Enrichment time
- 2026-10-31T08:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.