Anthropic Claude extension backdoored for 12 hours
Ars Technica: Anthropic VS code extension on Cursor backdoored for nearly 12 hours
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers' machines, multiple sources reported Friday. Anthropic so far has yet to warn customers of the incident. The compromised package was a VS Code extension available in the marketplace of Cursor, a maker of AI-assisted developer tools, the company said Friday. The malicious version, 2.1.313, subsequently affected “at most 5,000 users,” presumably when they either downloaded it or their syste
Get smart on it
An official extension for an AI model was compromised through a verified account on a code editor marketplace, affecting as many as 5,000 developers' machines. The malicious version installed a persistent backdoor that could collect sensitive information like cloud credentials, API tokens, and system details from infected devices, then maintain remote access to them. The backdoor contained coding errors that prevented it from fully functioning in some cases, but security researchers assessed it as still representing a significant threat. It remains unexplained how attackers gained access to the official account used to distribute the compromised extension, and neither the extension maker nor the AI company has publicly warned customers about the incident.
Explainer: Why Cursor Is Training Its Own Trillion-Parameter AI Model
Relevant courses
Want to go deeper than the news? Explore live, cohort-based AI courses taught by practitioners.
Browse AI courses on MavenRelated news
As Anthropic finally files for IPO, rising risks aren’t slowing the AI buildout, yet
The other artificial intelligence shoe dropped this week, as Anthropic filed for what surely will be the second blockbuster AI initial public offering of stock this year. Nearly 70,000 words in the filing list a ton of risks, but in short, it’s making unimaginably huge bets on buying computing power, it’s uncertain on how long […] The post As Anthropic finally files for IPO, rising risks aren’t slowing the AI buildout – yet appeared first on SiliconANGLE.
Also reported by TechCrunch
AI can turn security fixes into working exploits before users receive an update
GLM 5.3 turned published-but-unshipped Firefox security fixes into working one-click exploits for six releases, at roughly $1,000 each.
White House makes Section 232 determination regarding foreign-made robots
A Section 232 investigation by the secretary of commerce found that robotics imports pose a threat to U.S. national security and economic competitiveness. Source: Office of the White House Yesterday, U.S. President Donald J. Trump issued a proclamation stating that the secretary of commerce had submitted a Section 232 report about the national security effects of imports of robotics and industrial machinery, as well as related parts and components. “Based on the facts considered in that in
How a Contractor’s Claude Agent Got Into the Pentagon
This week on “Uncanny Valley,” we discuss the contractor who plugged their AI agent into a Pentagon system, Anthropic’s IPO filing, and the volunteers gearing up to counter ICE at the midterms.
A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System
Sources tell WIRED that an Accenture employee’s personal Claude agent ran on a DOD network for two months before it was identified and the vulnerability could be patched.
Anthropic is asking Wall Street to believe in AGI
Today on Decoder, I’m joined by Joey Brookhart, an analyst at the chip and AI research firm SemiAnalysis, to help me dig into the story inside the numbers of the Anthropic IPO filing — a document known as an S-1. Anthropic just filed its S-1 to go public on the Nasdaq, and it could start trading as soon as next month at a valuation of anywhere between $1.5 trillion and $2 trillion. That would immediately make it one of the most valuable companies on the planet. But the price