Microsoft has warned that malicious Claude Code extensions distributed through Cursor’s marketplace attempted to install a persistent SSH backdoor on developer …

Sichere Programmierung GBHackers Security | #1 Globally Trusted Cyber Security News Platform 31.10.2026, 09:10 Uhr 1 Min. Lesezeit

BeitragSeite↗ Quelle (GBHackers Security | #1 Globally Trusted Cyber Security News Platform)

Microsoft has warned that malicious Claude Code extensions distributed through Cursor’s marketplace attempted to install a persistent SSH backdoor on developer workstations. The trojanized packages, anthropic.claude-code versions 2.1.312 and 2.1.313, combined legitimate extension functionality with injected JavaScript that prepared unauthorized... Weiterlesen: Hackers Distribute Malicious Claude Code Extension on Cursor Marketpl…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege

CTI Threat Relationship Graph

Akteure · Techniken · Beziehungen

2 Knoten · 1 Relationen

CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC

🚀 Auf tsecurity.de entdecken

Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

Noch keine Leser-Bewertungen

War diese Seite hilfreich?

🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

7 Quellen

CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600)

6 weitere Quellen

VulDB Updatesvor 1 Std.CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597) VulDB Updatesvor 1 Std.CVE-2026-119089 | ThirstyAffiliates Plugin up to 3.12.1 on WordPress Comment Content comment cross site scripting (EUVD-2026-114598) VulDB Updatesvor 1 Std.CVE-2026-116522 | comesio Relevanssi Plugin up to 4.28.5 on WordPress comment cross site scripting (EUVD-2026-114599) VulDB Updatesvor 1 Std.CVE-2026-111592 | PublishPress Authors Plugin up to 4.17.0 on WordPress name cross site scripting (EUVD-2026-114646) VulDB Updatesvor 1 Std.CVE-2026-116548 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress optionals cross site scripting (EUVD-2026-114612) VulDB Updatesvor 1 Std.CVE-2026-118070 | Welcart E-Commerce Plugin up to 2.12.5 on WordPress gid cross site scripting (EUVD-2026-114609)

↗ Analyse öffnen

3 Quellen

CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606)

2 weitere Quellen

VulDB Updatesvor 1 Std.CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602) VulDB Updatesvor 1 Std.CVE-2026-119065 | arosoft Shipping Zones by Drawing for WooCommerce Plugin up to 3.3.0 on WordPress Checkout Field szbd_checkout_field_update_order_meta szbd-picked cross site scripting (EUVD-2026-114614)

↗ Analyse öffnen