LIVE FEED
FIRST LOOK OpenAI Updates Model Spec to Sharpen AI Judgment and Safety // HIGH Prompt Injection Targets AI Agent Planning in New Attacks // FIRST LOOK Mistral Releases Mistral Large 4 Open Weights for Cyber Defense // HIGH Hugging Face Malware Hijacks GPUs via trust_remote_code // CRITICAL Claude Code VS Code Extension Trojanized with SSH Backdoor // FIRST LOOK YC Labs Runs GPT-6.1 Multi-Agent Swarms in Open Game Worlds // FIRST LOOK AWS AgentCore Gateway Turns 400-Plus APIs into Agent Tools // MEDIUM Claude Code Agent Transcripts Leaked via Silent Token Drain // FIRST LOOK Google Launches Gemini 4 Carbon with Cybersecurity Leap // HIGH Attackers Impersonate AI Bots to Scan for Exposed Credentials //
REVERSE-TUNNEL

Reverse-Tunnel

1 report
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Claude Code VS Code Extension Trojanized with SSH Backdoor

Claude Code VS Code Extension Trojanized with SSH Backdoor

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

The official Anthropic Claude Code extension on the Cursor IDE marketplace was compromised with a malicious 66-line JavaScript loader that installs a persistent SSH backdoor, affecting up to 5,000 users. The malware establishes reverse tunnels to an attacker-controlled server, harvests environment variable names (including cloud credentials and API keys), and installs cross-platform persistence mechanisms. Anthropic has since released a clean version 2.1.314, but all users of the compromised version remain at risk of persistent access even after removal.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.