News
cybersecurity SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone - BleepingComputer cybersecurity Hackers steal $6.3 billion from Binance in record crypto heist - Ars Technica Security cybersecurity Bulletproof Host Virtualine Loses Its Domain to FBI Seizure - SecurityWeek cybersecurity Malicious Claude Code Extension (2.1.313) in Cursor Marketplace Plants Attacker SSH Key and Persistence - OX Security cybersecurity Binance hack: how a compromised developer laptop can lead to a $6.3 billion breach - Aikido Security cybersecurity Trezor Warns of Malicious Hardware Implant Found in Safe 5 Cryptocurrency Wallet - CyberPress cybersecurity CISA says max severity GitLab flaw now exploited in the wild - BleepingComputer threat-intel Trezor Warns of Suspected Spy Implant That Could Steal Crypto Wallet Recovery Phrases - GBHackers threat-intel CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229 - GBHackers cybersecurity CISA Warns of Critical GitLab RCE Vulnerability Actively Exploited in Attacks - CyberPress cybersecurity Fresh WordPress Vulnerability in Attackers’ Crosshairs - SecurityWeek threat-intel Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures - GBHackers threat-intel Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials - GBHackers threat-intel Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits - GBHackers cybersecurity The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes - Wired Security
1 / 15
All news ›
Cybersecurity

Malicious Claude Code Extension (2.1.313) in Cursor Marketplace Plants Attacker SSH Key and Persistence

OX Security ·

A modified build of Anthropic’s Claude Code extension was available in the Cursor Extension Marketplace for about 11 hours on October 29, 2026. The malicious extension added an attacker-controlled SSH key, installed persistence, and attempted to open a reverse SSH tunnel. Overview On October 29, 2026, Cursor disclosed that a maliciously modified version of the […] The post Malicious Claude Code Extension (2.1.313) in Cursor Marketplace Plants Attacker SSH Key and Persistence appeared first on OX Security .

Continue on OX Security ↗ ‹ All news Get the newsletter

The summary and image come from OX Security; the image is shown from their website.