Help Net Security

Claude Code extension poisoned with persistent SSH backdoor

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those ...

Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...

The Threat of the 'EMBRACE' Vulnerability Targeting VS Code and Cursor, and Field Countermeasures

What you will learn in this article] The mechanism of 'EMBRACE', a design flaw in AI tool built-in browsers The impact and ...
Help Net Security

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...