Anthropic VS code extension on Cursor backdoored for nearly 12 hours

An Ars Technica security RSS collection covering major cybersecurity incidents and vulnerabilities, including a backdoored Anthropic Cursor extension, large-scale cryptocurrency theft, sensitive DHS data exposure, critical UEFI/EDK2 code execution, TLS certificate authority compromises, actively exploited Plex and PHP flaws, Tor exit-node hijacking, zero-click mercenary spyware delivery, and emerging risks involving AI agents and MCP. Several reports describe active exploitation or compromise with potentially broad systemic impact.