Devs Hit by Trojanized Claude Code Extension for Cursor

Summary

Two serious security issues affected Cursor on the same day. The reports highlight risks for AI-powered integrated development environments (IDEs).

Related items

• Medium“Black October” for AI Developer PlatformsSame vendor · Wiz Research Blog
• MediumCritical Linux kernel flaw allows remote root attacks on MPTCP serversSame vendor · BleepingComputer
• MediumA Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of DevicesSame vendor · Wired (Security)
• InfoThe biggest names in AI are backing a new way to opt out of scrapingSame vendor · The Verge (AI)
• HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSame vendor · NVD/CVE Database