Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Anthropic's VS Code extension for Cursor suffered a backdoor incident lasting about 12 hours, and the attack vector remains unknown.
Key points
- •The VS Code extension for Cursor experienced a backdoor incident lasting roughly 12 hours.
- •How the attacker accessed Anthropic's authenticated Cursor accounts is still unknown.
- •As a serious security vulnerability, monitoring account management and distribution channels is a challenge.