October brought a heavy run of cybersecurity disclosures involving cryptocurrency exchanges, web servers, AI tools, software ...

The FBI has identified North Korea's "TraderTraitor" hacking group as responsible for the $6.3 billion Binance crypto heist, ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by ...

October’s cybersecurity disclosures spanned cryptocurrency exchanges, web runtimes, AI platforms, software repositories, government records, and supermarkets.

SummaryPHP2Shell is a critical PHP vulnerability announced in October 2026. It allows attackers to execute unauthorized programs on a server without authentication, affecting platforms like WordPress ...

From late October to early November 2026, a series of events have occurred that are significantly rewriting the rules and ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A Python startup hook, a second runtime fetched at load, and the rule files of 14 AI coding agents rewritten. The campaign ...

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected ...

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...