A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
2026-10-31T08:52:05Z•8acb449bc9b6e1c0234e2c1ce77761d35905d5b2a6ec3491a7b7ce43f0940935
AI-assisted-cyberattacksClaude-extensionsNorth-KoreaPHPUEFIactively-exploited-vulnerabilitiescryptocurrency-theftdata-breachdeepfakesdeveloper-endpointsfirmware-vulnerabilityinformation-disclosureinsider-threatmalwareprivacyremote-code-executionspywaresupply-chain-attacksurveillancetargeted-advertisingzero-click-exploit
What happened
WIRED security feed covering major cybersecurity and privacy developments, including a supply-chain malware campaign targeting Anthropic Claude extensions and thousands of developer devices, a critical UEFI firmware code-execution flaw affecting servers, actively exploited PHP vulnerabilities, spyware delivered through targeted advertising, AI-assisted cyberattacks, data leaks, cryptocurrency theft, and privacy or surveillance controversies.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- wired_security
- Record identifier
- 8acb449bc9b6e1c0234e2c1ce77761d35905d5b2a6ec3491a7b7ce43f0940935
- Enrichment time
- 2026-10-31T08:52:05Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.