CSO Online دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۵:۰۳

Cursor removes malicious Claude Code extension after SSH backdoor attempt

A malicious version of Anthropic’s Claude Code extension distributed through the Cursor marketplace attempted to install a persistent Secure Shell (SSH) backdoor on developers’ machines, potentially giving attackers remote access to systems holding source code, credentials and other sensitive information. “Between about 2:27am PT and 1:35pm PT today, a maliciously modified version of Anthropic’s Claude Code extension…

Malware & Threats Supply Chain Security Threat Intelligence Programming & Languages Cloud Computing Operating Systems

Read the full article at CSO Online Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Malwarebytes Blog سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۷:۴۱

A hidden backdoor put 1.3 million TV boxes to work for criminals

Videostrong planted a backdoor in more than 1.3 million Android set-top boxes and sold criminals access to the resulting botnet.

Malware & Threats Botnet & DDoS Mobile Development

Source

BleepingComputer سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۷:۳۰

UK school estate hit by 3AM ransomware in suspected AI-assisted attack

A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host. [...]

Malware & Threats Ransomware AI Security

Source

Cloudflare Blog سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۷:۳۰

Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities

Zero Wire on Cloudflare Radar pairs plain-language briefings with global attack telemetry and remediation steps. Triage critical CVEs faster and decide how to protect your infrastructure.

Vulnerabilities & Zero-Day Threat Intelligence

Source

Help Net Security سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۷:۲۹

Assured helps recovery teams find clean backups after ransomware attacks

Assured Data Protection has announced CleanRoom SCAN, a new managed service designed to strengthen cyber recovery by independently scanning isolated backup data using multiple leading security engines to identify hidden threats before restoration. The service helps organizations identify malware and other indicators of compromise earlier, reducing the risk of reinfecting production environments during recovery. Clean…

Malware & Threats Ransomware Storage & Backup

Source