NewsArs Technica — Security
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Teaser from the source
It's still unknown how attackers got access to Anthropic's verified Cursor account.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Ars Technica — SecurityMore on backdoored
Other advisories
- Criticalpwn_watch:ovhcloud-cli-github-infostealerOVHcloud CLI releases backdoored on GitHub
- Highpwn_watch:updraftcentral-keys-wordpress-backdoorTeamUpdraft / UpdraftCentral keys stolen; WordPress sites backdoored
- Criticalpwn_watch:rank-math-pro-wordpress-backdoorRank Math PRO WordPress plugin download backdoored
- Criticalpwn_watch:aomei-backupper-update-supply-chainAOMEI Backupper update servers backdoored (Mandiant)
- Highpwn_watch:ultralytics-pypi-supply-chain-attackUltralytics PyPI releases backdoored with a crypto miner
- HighCVE-2024-54134@solana/web3.js npm package backdoored to steal private keys
Other news entries
- OVHcloud CLI releases backdoored on GitHub to steal developer secretsNewsBleepingComputer
- Modified ScreenConnect Clients Used in Worm-Like CampaignNewsSecurityWeek
- Backdoored Rust packages hit crates.io, exposing developers to malware at build timeNewsCSO Online
- Thousands of servers can be backdoored by exploiting buggy motherboard controllersNewsArs Technica — Security
- ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain AttackNewsThe Hacker News
- China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a DecadeNewsThe Hacker News
- Dozens of Red Hat packages backdoored through its official NPM channelNewsArs Technica — Security
- Widely used Daemon Tools disk app backdoored in monthlong supply-chain attackNewsArs Technica — Security
ID