AINewsnow

Cursor's Security Incident, Explained: A Leaked Vendor Key, a Poisoned Extension, and 5,000 Users at Risk

On November 13, Cursor published the full investigation into a security incident it first disclosed on October 29: a malicious, unauthorized copy of Anthropic's Claude Code extension had appeared in the Cursor VS Code extension marketplace. The post is worth reading in full, because the attack chai…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-14 02:20 · DEV Community — AI
    Cursor's Security Incident, Explained: A Leaked Vendor Key, a Poisoned Extension, and 5,000 Users at Risk

More stories

  1. AI coding agents accelerate code writing, but verification and release remain bottlenecks — DEV Community — AI
  2. The git worktrees your coding agents leave behind, and how to clean them up — DEV Community — AI
  3. Chinese Astrology MCP: BaZi and Zi Wei Inside Claude, Codex, and Cursor — DEV Community — AI
  4. Sentinel-IR MCP 0.5: a bouncer for your AI assistant — DEV Community — AI
  5. How to Turn Your API into an MCP Server Without Writing Server Code — DEV Community — AI
  6. How does the LawVu MCP server work? — DEV Community — AI
  7. Model Context Protocol (MCP): How AI Agents Connect to Tools — DEV Community — AI
  8. What AI coding tools actually cost in November 2026 (16 tools, list prices with sources) — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →