Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Ars Technica security RSS items report major cybersecurity events including a backdoored Anthropic VS Code extension, record-scale cryptocurrency theft attributed to North Korea, exposure of DHS and ICE personnel, critical UEFI/EDK2 code-execution flaws, compromised TLS certificate infrastructure, active exploitation of Plex and PHP vulnerabilities, Tor exit-node compromise, mercenary spyware delivered through zero-click advertising exploits, and emerging risks involving autonomous AI agents and MCP. Several reports describe active exploitation or systemic trust failures with potentially broad