A fake Claude Code extension on Cursor could expose 5,000+ users to data theft and hacking. Here's what happened and how to ...

A fake update was delivered under the official nameFrom the evening of October 29th to the following morning, a tampered ...

SpaceX-owned coding platform Cursor has taken down a malicious Claude Code extension that could expose users' personal ...

Fake ChatGPT Plus billing emails trick users into revealing credit card details and OTPs through fraudulent payment pages.

A phishing email disguised as an Evite fooled a man even after he emailed his friend to verify it, revealing how compromised ...

Hackers are impersonating OpenAI in a phishing campaign that uses fake ChatGPT Plus billing emails to steal payment card information and request one-time passwords. The messages claim a subscription ...

A malicious version of Anthropic's Claude Code extension was listed on the Cursor marketplace for more than 11 hours, ...

Cursor has announced that it confirmed a security incident in version 2.1.313 of "Anthropic.claude-code," which was ...

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1 ...

This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs, and more.

Arctic Wolf analysed more than 400 incidents in which hackers impersonated IT support through Microsoft Teams to gain remote ...

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...