Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Ars Technica security feed containing reports of major cyber incidents and vulnerabilities, including a backdoored Anthropic Cursor extension, a record cryptocurrency theft, sensitive DHS data exposure, critical UEFI/EDK2 code execution flaws, compromised TLS certificate authorities, actively exploited PHP and Plex vulnerabilities, Tor exit-node hijacking, mercenary spyware delivered through zero-click exploits, and emerging security risks involving AI agents and MCP. The feed includes multiple high-impact or potentially critical events, but the supplied summaries do not provide enough detail,