Cursor confirms security breach enabled malicious Claude Code extension

Cursor confirmed a security breach allowed hackers to distribute a malicious Claude Code extension through its marketplace after credentials were stolen from AI infrastructure provider Firework.

Read the full story at BleepingComputer ↗

Timeline · 1 report

2026-11-14 17:27 · BleepingComputer
Cursor confirms security breach led to malicious Claude Code extension

More stories

AI coding agents accelerate code writing, but verification and release remain bottlenecks — DEV Community — AI
The git worktrees your coding agents leave behind, and how to clean them up — DEV Community — AI
Chinese Astrology MCP: BaZi and Zi Wei Inside Claude, Codex, and Cursor — DEV Community — AI
Sentinel-IR MCP 0.5: a bouncer for your AI assistant — DEV Community — AI
How to Turn Your API into an MCP Server Without Writing Server Code — DEV Community — AI
How does the LawVu MCP server work? — DEV Community — AI
Model Context Protocol (MCP): How AI Agents Connect to Tools — DEV Community — AI
What AI coding tools actually cost in November 2026 (16 tools, list prices with sources) — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →