The Hacker News یکشنبه ۲۴ آبان ۱۴۰۵ · ۱۱:۵۲

Stolen Fireworks AI Key Led to Cursor Data Breach and Trojanized Claude Code Extension

The compromise of Anthropic's official Claude Code extension on Cursor's extension marketplace was the result of the theft of an access key that was exposed in the wake of a breach targeting Fireworks AI. "An attacker obtained an access key we had issued to Fireworks," Cursor said in a Friday update. "The key was exposed by Fireworks, and the attacker used it to copy data from a read-only

نشت داده

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

BleepingComputer شنبه ۲۳ آبان ۱۴۰۵ · ۲۰:۵۷

Cursor confirms security breach led to malicious Claude Code extension

Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI. [...]

نشت داده امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین

منبع

Security Affairs شنبه ۲۳ آبان ۱۴۰۵ · ۲۰:۱۶

Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records

Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records through a compromised third-party provider. A newly formed Russian cyber extortion group called n0n claims it has hit Expedia, the world’s second-largest online travel agency, and taken data on nearly one billion travelers. Expedia confirmed to Skift on Thursday that attackers […]

بدافزار و آلودگی فیشینگ نشت داده

منبع

The Hacker News شنبه ۲۳ آبان ۱۴۰۵ · ۱۶:۰۸

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-114713 (CVSS score: 8.6), is a case of improper neutralization of delimiters

آسیب‌پذیری و روز صفر متن‌باز

منبع

CSO Online شنبه ۲۳ آبان ۱۴۰۵ · ۰۵:۰۹

The firewall becomes the foothold: Attackers turn Check Point gateways against customers

A firewall is intended to be a boundary attackers can’t cross. But firewalls face the web, making them just as vulnerable to attack as other systems, as evidenced by the emergency hotfixes released by Check Point Software for several of its products. The patches address a high-severity privilege escalation flaw, CVE-2026-123039, that gives attackers root privilege access and the ability to send commands to the Gaia O…

بدافزار و آلودگی آسیب‌پذیری و روز صفر نشت داده

منبع