cyberpress

Microsoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor

Microsoft has warned that a trojanized Claude Code extension distributed through Cursor’s marketplace attempted to install a ...
cyberpress

Critical Langflow AI Vulnerabilities Allow Hackers to Bypass Authentication and Execute Remote Code

Another critical entry, CVE-2026-110186, carries a 9.8 score and concerns improper control of code generation, classified as CWE-94. IBM’s summary describes unauthenticated remote code execution ...
finance.biggo

Malicious Claude Code Extension on Cursor Marketplace Hid SSH Backdoor, Up to 5,000 Users Exposed

A tampered build of Anthropic's Claude Code extension for Visual Studio Code, labeled version 2.1.313, was found to contain a 66-line loader ...
GitHub

Code Through Time

A Small Project About Coding And Software History. Contribute to samappl/Code-Through-Time development by creating an account on GitHub.
The Hacker News

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

Critical vulnerability in Next.js allows 'unauthenticated takeover'. Two weeks since the patch, potential PoC code has emerged, so if you haven't already, up…

Next.js released an emergency security update on October 14. Two of the issues are 'Critical' and could allow code execution ...
The Hacker News

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...