News
cybersecurity Over 1,000 GitLab servers vulnerable to ongoing RCE attacks - BleepingComputer cybersecurity iPhone Jailbreak Vulnerabilities Put Crypto Wallet Seed Phrases at Risk on Older Devices - CyberPress threat-intel Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases - GBHackers threat-intel New ChatGPT Phishing Kit Uses Rotating WordPress Websites to Steal Payment Details and OTPs - GBHackers cybersecurity Hackers Compromise Ukraine and Russia’s Emergency Alert Apps to Spread Fake Nuclear Warnings - CyberPress cybersecurity Malicious Claude Code Extension Served in Cursor Supply Chain Attack - SecurityWeek cybersecurity Synology warns of C3RB3R ransomware attacks targeting NAS devices - BleepingComputer threat-intel Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings - GBHackers cybersecurity Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data - The Hacker News threat-intel Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C - GBHackers cybersecurity Hackers Use Fake ChatGPT Plus Billing Emails to Steal Credit Card Details and OTP Codes - CyberPress cybersecurity Hackers Target Supermarket Refrigeration Systems in Sweden, Raising Temperatures to 50°C - CyberPress threat-intel Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) - Rapid7 Emergent Threat Response cybersecurity My Journey to the Center of America’s Political Spam Text Hell - Wired Security threat-intel Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers - GBHackers
1 / 15
All news ›
Cybersecurity

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

SecurityWeek ·

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. The post Malicious Claude Code Extension Served in Cursor Supply Chain Attack appeared first on SecurityWeek .

Continue on SecurityWeek ↗ ‹ All news Get the newsletter

The summary and image come from SecurityWeek; the image is shown from their website.