Hak5: Claude Code Extension Hid an SSH Backdoor | Threat

Could a trusted Claude Code extension on the Cursor marketplace secretly give hackers SSH access to your computer? This week on Hack5 ThreatWire, we investigate the malicious extension that affected nearly 5,000 users, a massive cryptocurrency theft, and the latest cybersecurity threats involving Apple spyware, hacked refrigeration systems, and online privacy.







⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️





@endingwithali →

Twitch: https://twitch.tv/endingwithali

Twitter: https://twitter.com/endingwithali

YouTube: https://youtube.com/@endingwithali

Everywhere else: https://links.ali.dev



Want to work with Ali? [email protected]





LINKS

🔗 Story 1: Finally Covering A Cyptocurrency Hack

https://arstechnica.com/security/2026/10/hackers-steal-6-3-billion-from-binance-in-record-crypto-heist/

https://x.com/binance/status/2115993361517891592

https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html

https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack

🔗 Story 2: Claude Extension Hacked

https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/

https://x.com/cursor_ai/status/2116074289053175808

https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html

https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor

https://cursor.com/blog/claude-code-extension-security-notice

🔗 Story 3: Throw Back Story

https://developer.chrome.com/release-notes/154#ask_before_http_on_by_default

https://www.engadget.com/cybersecurity/google-chrome-will-finally-default-to-secure-https-connections-starting-in-april-170000603.html

https://www.bleepingcomputer.com/news/google/google-chrome-to-warn-users-before-opening-insecure-http-sites/

https://security.googleblog.com/2025/10/https-by-default.html





🔗 Story 4: BSides News

https://thehackernews.com/2026/10/attackers-heat-french-supermarket.html

https://www.bleepingcomputer.com/news/security/hackers-disrupt-refrigeration-systems-at-european-supermarkets/

https://tech-insider.org/ao3-down-security-incident-possible-data-breach-2-4-weeks-2026/

https://www.bleepingcomputer.com/news/security/discord-to-let-search-engines-index-public-server-messages/

https://www.reddit.com/r/mildlyinfuriating/comments/1xh9epf/discord_messages_from_public_servers_will_be/

https://therecord.media/apple-warns-users-99-countries-mercenary-spyware

https://www.bleepingcomputer.com/news/security/reddit-to-lock-content-behind-logins-to-fight-scrapers/

https://www.reddit.com/user/spez/comments/1xiupm0/about_that_login_screen/

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Our Site → https://www.hak5.org

Shop → http://hakshop.myshopify.com/

Community → https://www.hak5.org/community

Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1

Support → https://www.patreon.com/threatwire

Contact Us → http://www.twitter.com/hak5

____________________________________________



Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.