Cybersecurity

Official Claude Code Extension Compromised on Cursor Marketplace to Install SSH Backdoor

Cybersecurity researchers have revealed that a malicious version of the official Anthropic Claude Code extension was distributed via the compromised Cursor Marketplace, installing persistent SSH backdoors and…
Read article →

Cybersecurity

Hackers Actively Exploit Critical Authorization Bypass in Drupal Commerce Core

Drupal has issued a warning regarding the active exploitation of a highly critical security flaw in its Commerce Core module, identified as CVE-2026-118539. The vulnerability allows attackers to bypass authorization…
Read article →

Cybersecurity

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog with two critical flaws affecting GitLab and Cisco software, citing confirmed evidence of…
Read article →

Cybersecurity

Binance Confirms $6.3 Billion Security Breach Linked to North Korean Actors; Nearly $3 Billion Frozen

Cryptocurrency exchange Binance reported a major security incident impacting approximately $6.3 billion in assets, with initial investigations pointing to a compromised DevOps engineer's laptop. While nearly $3 billion…
Read article →