Malicious Claude Code Extension Served in Cursor Supply Chain Attack

SecurityWeek RSS highlights active exploitation and significant security incidents, including a malicious Cursor/Claude Code extension attempting host reconnaissance and reverse SSH tunneling, an AI-driven Chainalysis breach, a DNS hijack affecting Polymarket, North Korean cryptocurrency theft and laundering, and two Ivanti Connect Secure zero-days added to CISA KEV. It also reports widespread exploitation of critical Palo Alto firewall PHP flaws and additional emerging AI, firmware, and cloud security issues.