This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs, and more.

The compromised versions attempted to plant SSH keys and establish persistent remote access; Anthropic says an attacker used access to Cursor’s marketplace to publish the tampered extension.

Javascript is required for you to be able to read premium content. Please enable it in your browser settings.

The code I had the AI write works, but is it safe to deliver as is?”“It worked fine with test data, but I have no idea what ...

Cursor is warning developers who installed a Claude Code extension from its own marketplace during an October 29 attack ...

DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A malicious version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a ...

A realistic roadmap to learn JavaScript for web development, from your first console.log to your first real project, without ...

A new JavaScript obfuscation method hinders AI analysis by exploiting safety protocols. This raises concerns about code security — here's why it matters.

A tampered Claude Code 2.1.313 build added an svc-telemetry SSH key and persistence; Cursor says up to 5,000 users installed ...

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...