HOC Shorts | BREAKING! The official Claude Code VS Code extension compromised in a supply chain attack on October 30, 2026. The Threat: Threat actors injected a malicious loader into version 2.1.313 that secretly installed persistent SSH backdoors and exfiltrated host data. The Fix: Anthropic swiftly pulled the tainted build and released a clean... Weiterlesen: Claude Code VS Code Extension Compromised In Supply Chain Attack
Intelligence View
⚡ tsecurity.de Intelligence
Claude Code VS Code Extension Compromised In Supply Chain Attack
HOC Shorts | BREAKING! The official Claude Code VS Code extension compromised in a supply chain attack on October 30, 2026. The Threat: Threat actors injected…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1041TA0010 · Exfiltration
Exfiltration Over C2 Channel
Mitigation: M1057 Data Loss Prevention
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 75%
Wprowadzić filtrowanie egress, sprawdzić wytyczne DLP, alert na nietypowe woluminy wysyłania.
T1195TA0011 · Command and Control
Supply Chain Compromise
Mitigation: M1045 Code Signing
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 88%
Invent SBOM / zależności z kontroli zależności / pleśni, podpisać i zweryfikować artefakty za pośrednictwem Sigstore (cosign), monitorować kanały aktualizacji kompromisu.
Command and Control
Exfiltration
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
47 źródeł
ZDI-26-925: (0Day) Meta fairseq FairseqLAMB YAML File Parsing Code Injection Remote Code Execution Vulnerability
46 kolejnych źródeł
ZZDI: Published Advisoriesvor 13 Std.ZDI-26-911: (0Day) Meta Detectron2 DensePose Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 13 Std.ZDI-26-910: (0Day) Meta Detectron2 LazyConfig Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 13 Std.ZDI-26-909: (0Day) Meta Detectron2 CfgNode.merge_from_file Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 13 Std.ZDI-26-907: (0Day) Meta Detectron2 vertex_feature_embedder Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 13 Std.ZDI-26-908: (0Day) Meta Detectron2 load_proposals_into_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 13 Std.ZDI-26-952: (0Day) Meta FAIRChem _cli YAML File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
+40
16 źródeł
CVE-2025-40196 | Linux Kernel up to 6.6.113/6.12.53/6.17.3 kernel/workqueue.c quota_release_work denial of service (Nessus ID 275347 / WID-SEC-2025-2595)
15 kolejnych źródeł
VVulDB Updatesvor 6 Std.CVE-2025-40261 | Linux Kernel up to 6.6.117/6.12.59/6.17.9 nvme_fc_delete_ctrl information disclosure (EUVD-2025-201196 / Nessus ID 277521) VVulDB Updatesvor 4 Std.CVE-2025-68264 | Linux Kernel up to 6.12.61/6.17.11/6.18.0 ext4 ext4_update_inline_data/ext4_create_inline_data denial of service (EUVD-2025-203738 / Nessus ID 296481) VVulDB Updatesvor 4 Std.CVE-2025-68265 | Linux Kernel up to 6.12.61/6.17.11 nvme request_queue use after free (EUVD-2025-203749 / Nessus ID 299530) VVulDB Updatesvor 4 Std.CVE-2025-68261 | Linux Kernel up to 6.12.61/6.17.11/6.18.0 fs/ext4/indirect.c ext4_destroy_inline_data_nolock buffer overflow (EUVD-2025-203741 / Nessus ID 298404) VVulDB Updatesvor 4 Std.CVE-2025-68206 | Linux Kernel up to 6.17.8 nf_nat_setup_info state issue (Nessus ID 296481 / WID-SEC-2025-2868) VVulDB Updatesvor 3 Std.CVE-2025-68291 | Linux Kernel up to 6.12.60/6.17.10 tcp_send_active_reset divide by zero (EUVD-2025-203789 / Nessus ID 298404)
+9
7 źródeł
#heiseshow: Jensen Huang, US-Wahlergebnisse und KI, Wasserstoff
6 kolejnych źródeł
Hheise & c'tvor 4 Std.heise & c't: #heiseshow: Jensen Huang, US-Wahlergebnisse und KI, Wasserstoff NNYT > Technologyvor 2 Std.Silicon Valley Tech Allies Support Jensen Huang TTechCrunchvor 3 Std.Is Jensen Huang’s bad behavior more commonplace than it seems? FFeed: Artificial Intelligen…vor 4 Std.China’s Nvidia Honeypot Isn’t Surprising. Jensen Huang Fell for It Anyway NNYT > Artificial Intelligen…vor 4 Std.Silicon Valley Tech Allies Support Jensen Huang TTechCrunchvor 3 Std.Is Jensen Huang’s bad behavior more commonplace than it seems?
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4315171/wiadomoci-o-bezpieczestwie-it/claude-code-vs-code-extension-compromised-in-supply-chain-attack/