Anthropic VS code extension on Cursor backdoored for nearly 12 hours
2026-10-31T20:51:38Z•85a914b3b4e0e15ea13c06930ef66666b9d71fe3ede876f9f4ebbc5ef52b0443
AI-agentsAI-securityEDK2IoTMCPNorth-KoreaPHPSSHTLSTorUEFIbackdoorcertificate-authority-compromisecertificate-transparencycryptocurrency-theftcybersecuritydata-breachmalwaremercenary-spywarephishingransomwareremote-code-executionsupply-chain-attackvulnerabilityzero-click-exploit
What happened
An October 2026 Ars Technica security RSS collection covering major cybersecurity incidents and vulnerabilities, including a backdoored Anthropic Cursor extension, a record cryptocurrency theft, exposure of DHS personnel, critical UEFI and PHP code-execution flaws, compromised TLS certificate infrastructure, Tor exit-node hijacking, exploited Plex servers, zero-click mercenary spyware delivery, and emerging risks involving AI agents and MCP communications. The collection includes both confirmed incidents and unconfirmed or forward-looking reports; several items indicate critical systemic or in
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 85a914b3b4e0e15ea13c06930ef66666b9d71fe3ede876f9f4ebbc5ef52b0443
- Enrichment time
- 2026-10-31T20:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.