BleepingComputer (1 hour ago)
A malicious version of Anthropic’s Claude Code VS Code extension was distributed through Cursor’s extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors.
Read the full story on BleepingComputer.
This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about.
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.
Multiple commissaries reported freezers full of wilted and spoiled food following malfunctions thought to be part of a cyberattack.
Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.
Watching the NFL 2026 season from anywhere just got a whole lot cheaper, thanks to IPVanish’s exclusive Black Friday VPN deal.
A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices.
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates.
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild.
71 active sources
26 Turkish · 45 English
All sources
