← Back to the boardNews
Cursor confirms security breach led to malicious Claude Code extension
Why it’s here: Specialist cybersecurity reporting on a supply-chain compromise of an AI coding tool via malicious Claude Code extension, a wave of attacks on AI developer platforms, and exposure of federal-relevant AI infrastructure, which bears on cybersecurity policy and AI sector security.
Trace across the boardItem
YesterdayBleepingComputer · research by CursorCursor confirms security breach led to malicious Claude Code extensionCursor disclosed that a breach traced to stolen Fireworks AI credentials let attackers push trojanized Claude Code extension versions to its marketplace, exposing up to 5,000 developers to attempted SSH backdoors.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor20 linked
Connected
20 links- News“Black October” for AI Developer Platforms | Wiz BlogBoth involve Anthropic, Wiz, Fireworks
- NewsDevs Hit by Trojanized Claude Code Extension for CursorBoth involve Anthropic, Claude Code, Cursor
- NewsCyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcriptsBoth involve Cursor, Fireworks, Notion
- NewsRailway breach leads to $740,000 in fraudulent AI chargesBoth involve Wiz, OpenCode, Railway
- NewsAI company Fireworks says hackers stole data, billing info during October breachesBoth involve Fireworks, Notion
- NewsCyberattacks threaten to make open source AI a little less open, Hugging Face exec warnsBoth involve Fireworks, OpenCode
- NewsHackers Stole Thousands of Uber Drivers’ Data Through an AI StartupBoth involve Fireworks, Notion
- NewsMeasuring AI agent autonomy in practiceBoth involve Anthropic, Claude Code
- NewsAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxBoth involve Anthropic, Claude Code
- NewsHackers stole AI credentials to get $740,000 in free compute; Railway picked up the billBoth involve Anthropic, Wiz, Railway
- NewsHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogBoth involve Claude Code, Wiz
- NewsDetecting and countering misuse of AI: August 2025Both involve Anthropic, Claude Code
- NewsTrustworthy agents in practiceBoth involve Anthropic, Claude Code
- NewsWhen AI builds itselfBoth involve Anthropic, Claude Code
- NewsFireworks AI discloses new breach after cloud provider hackBoth involve Fireworks
- NewsAnthropic Economic Index report: Learning curvesBoth involve Anthropic, Claude Code
- NewsEnabling independent research on how people use ClaudeBoth involve Anthropic, Claude Code
- NewsAI Coding Agents Leak Thousands of Secrets to GitHubBoth involve Claude Code
- NewsThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogBoth involve Claude Code, Wiz
- NewsBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz BlogBoth involve Claude Code, Wiz
About
- Anthropic
- Claude Code
- Cursor
- Wiz
- Fireworks
- Notion
- OpenCode
- Railway