Cursor confirms security breach led to malicious Claude Code extension
BLEEPINGCOMPUTER — Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI. [...]
- CODE
- RT-403E4B
- PUBLISHER
- BleepingComputer
- TOPIC
- Cybersecurity
- PUBLISHED
- 14 November 2026 · 17:27 UTC
- FIRST SEEN
- 14 November 2026 · 17:30 UTC
- ORIGINAL
- https://www.bleepingcomputer.com/news/security/cursor-confirms-security-breach-led-to-malicious-claude-code-extension/
- SHA-256
- c8fd7cd42e1fea6d515063e4a4f9141545ffcbd10c749726f08b98ff30868be9
The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.
Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.
More from BLEEPINGCOMPUTER
US disrupts North Korean campaign behind $400 million crypto theftRT-E25319 · CYBERSECURITY
Trezor confirms crypto-stealing implants in three wallets, releases fixRT-EE2742 · CYBERSECURITY
German military drone operations disrupted by cyberattackRT-F6F4A6 · CYBERSECURITY
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperRT-B297D8 · CYBERSECURITY
How one AI agent exposed five critical enterprise security gapsRT-DB3FD3 · CYBERSECURITY
Microsoft says November security updates cause printing issuesRT-293C69 · CYBERSECURITY
