A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. “The compromised extension.js file starts with an injected immediately invoked function expression…
J.D. Tuccille | 6.4.2015 8:54 PM The Office of Personnel Management explains: Within the last year, the OPM has undertaken an aggressive effort to update its cybersecurity posture, adding numerous tools and capabilities to its networks. As a result, in April 2015, OPM detected a…
Mac users who previously installed Popcorn Time could still face a security risk even if they stopped using the application years ago. Cybersecurity researchers have discovered a vulnerability in an old version of the software that could potentially allow attackers…
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. Drupal is urging online store owners to patch a highly critical access bypass vulnerability in the Commerce Core…
At about 23:48 UTC on 29 October 2026, count-only ZoomEye SDK queries with sub_type=all and page size 1 returned 58,944 matches for app="LiteLLM" and 62,957 for title="LiteLLM". The title query is the primary observation for this article. The counts describe fingerprint matches, not public…
Oct 30 (Reuters) – Cursor, the coding-tool company owned by SpaceX, said on Friday that a maliciously modified version of Anthropic’s Claude Code extension was available on its Cursor VS Code extension marketplace on Thursday, affecting up to 5,000 users. • Cursor said the…
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. A high-severity vulnerability in the popular remote-access tool TeamViewer could be exploited to take over a viewer’s (an IT support technician’s) system, cybersecurity…
This is the fourth agent-supply-chain story this blog has covered this month, and the most intimate one: LiteLLM stole the credentials your code runs with, Gheist harvested the secrets your CI holds, and now the tool your agent lives inside…
Cursor security incident on X: learn how a malicious Claude Code VS Code extension affected 5,000 users, what Cursor fixed, and update now. - AI coding startup Cursor, in a post on social media platform X, said that a security incident involving a…
This is not LND's fault. But golang sockets support the mptcp protocol by default, and unpatched linux kernels can be remotely exploited via mptcp via CVE-2026-98432. So if this command returns anything: The fix is upgrading to a kernel that…
Ransomware, supply‑chain attacks, leaks, patches, and incident reports.
An article joins this feed when it matches these terms. Each one is also a search of its own.