A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
2026-10-30T20:52:05Z•2518de8276224cf35eb4a10bd696ef031973ae12983bdb7b3d2b15c1db9a7e7f
AI-assisted cyberattacksAnthropic ClaudeNorth KoreaPHP vulnerabilitiesUEFI firmwareactive exploitationcode executioncryptocurrency theftdata breachdeepfakesdeveloper systemsinsider threatmalwaremercenary spywareprivacysupply-chain attacksurveillancezero-click spyware
What happened
A WIRED security feed covering major cyber threats and privacy incidents, including a supply-chain attack involving malicious Anthropic Claude extensions targeting thousands of developer systems, a critical UEFI firmware code-execution flaw affecting servers, actively exploited PHP vulnerabilities, AI-assisted exploitation, zero-click mercenary spyware, data leaks, and cryptocurrency theft. The items indicate several high-impact and actively exploited threats, but most entries lack sufficient technical detail or CVE identifiers for precise vulnerability mapping.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- wired_security
- Record identifier
- 2518de8276224cf35eb4a10bd696ef031973ae12983bdb7b3d2b15c1db9a7e7f
- Enrichment time
- 2026-10-30T20:52:05Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.