Anthropic VS code extension on Cursor backdoored for nearly 12 hours

Ars Technica security feed containing reports of major cybersecurity incidents and vulnerabilities, including a backdoored Anthropic Cursor extension, a record cryptocurrency theft, sensitive DHS data exposure, critical UEFI/EDK2 code execution, TLS certificate authority compromises, actively exploited PHP and Plex vulnerabilities, Tor exit-node hijacking, mercenary spyware delivered through zero-click exploits, and emerging risks involving AI agents and MCP. The feed includes multiple potentially critical, actively exploited, or systemic-impact events, but provides insufficient detail to map个