Cursor Extension Flaw Exposes Developer API Keys

A broad Infosecurity Magazine roundup reports multiple high‑risk developments: a browser cursor extension flaw that can exfiltrate developer API keys and session tokens; malicious npm supply‑chain packages (including an AI‑assisted commit) targeting developer credentials and crypto wallets and worm‑like propagation; researchers tracking ~2.9 billion compromised credentials with infostealers as a primary vector; a critical Vect 2.0 flaw converting ransomware into an irreversible data‑wiping wiper; and a confirmed Medtronic data breach claimed by ShinyHunters. Other notable items include Mirai‑派