← All reports

The security of AI development tools is compromised due to a backdoor in an Anthropic Claude extension for Cursor.

AISecurityTechnologyOct 31, 2026score 0.592 posts · 0 replies across 2 instances
A backdoor in an Anthropic Claude extension for Cursor was active for nearly 12 hours, potentially compromising up to 5,000 developer machines. The incident highlights security vulnerabilities in AI development tools and the need for better oversight.

Claims

The security of AI development tools is compromised due to a backdoor in an Anthropic Claude extension for Cursor.
Parent: AIEntity: AI development toolsImpact: negativeDate: Oct 31, 2026Target: The security of AI development tools
A backdoor in a software supply chain can lead to the compromise of multiple developer machines.
Parent: SecurityEntity: Software supply chainImpact: negativeDate: Oct 31, 2026Target: The security of the software supply chain

Source posts

@[email protected]
Anthropic VS code extension on Cursor backdoored for nearly 12 hours It's still unknown how attackers got access to Anthropic's verified Cursor account. https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
5 boosts · 0 favs · 0 replies · Oct 31, 2026
@[email protected]
An official Anthropic Claude extension for Cursor was backdoored for nearly 12 hours, hitting up to 5,000 developer machines. The malicious build tried to install a persistent SSH backdoor and harvest cloud credentials and API tokens. Cursor pulled it and rotated marketplace keys, but Anthropic has yet to warn customers. https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/ #AIagent #AI #GenAI #AISafety
0 boosts · 0 favs · 0 replies · Oct 31, 2026
#aiagent#ai#genai#aisafety
@[email protected]
#ArsTechnica #Tech Anthropic VS code extension on Cursor backdoored for nearly 12 hours https://arstechni.ca/s6cb
0 boosts · 0 favs · 0 replies · Oct 31, 2026
#arstechnica#tech
@[email protected]
Anthropic VS code extension on Cursor backdoored for nearly 12 hours https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/
0 boosts · 0 favs · 0 replies · Oct 31, 2026