Ethical Hacking News
Anthropic, a leading AI-focused technology firm, has been at the center of a recent supply-chain attack on Cursor, a popular development platform. The incident, which has been attributed to a malicious version of the Claude Code extension, has sparked a debate about the role of AI in cybersecurity and the responsibility of technology firms in protecting their users. In this article, we will explore the details of the incident and examine the implications of the attack for technology firms and their users. We will also discuss the ways in which AI can be used to improve cybersecurity and the role of Anthropic and Cursor in the incident.
Anthropic, a leading AI-focused technology firm, was accused of involvement in a targeted supply-chain attack on Cursor, a popular development platform. A malicious version of the Claude Code extension, which contained a persistent SSH backdoor, was uploaded to Cursor's marketplace and downloaded by thousands of users. The extension collected information about the host machine and user, including usernames, configured Git emails, and public IP addresses, as well as attempting to open a reverse SSH tunnel. Anthropic denied allegations of involvement, stating that the malicious package was uploaded by a malicious actor and that their official channels were not affected. The incident raised questions about the role of AI in cybersecurity, the responsibility of technology firms, and the importance of responsible AI development and deployment.
In a recent turn of events, the cybersecurity community has been left reeling in response to allegations that Anthropic, a leading AI-focused technology firm, was involved in a targeted supply-chain attack on Cursor, a popular development platform. The incident, which has been attributed to a malicious version of the Claude Code extension, has sparked a heated debate about the role of AI in cybersecurity and the responsibility of technology firms in protecting their users.
According to reports, the malicious version of the Claude Code extension, which contained a persistent SSH backdoor, was uploaded to Cursor's marketplace by an unknown party. The extension, which was available for download for approximately 11 hours, collected information about the host machine and user, including usernames, configured Git emails, and public IP addresses, as well as attempting to open a reverse SSH tunnel.
Anthropic, the firm behind the Claude Code extension, has denied allegations that the company was involved in the supply-chain attack. In a statement, Felix Rieseberg, a member of Anthropic's technical staff, stated that the malicious package was uploaded to Cursor's marketplace by a malicious actor, and that the company's official channels were not affected. Rieseberg also noted that the versions of the extension published on Anthropic's official channels were not tampered with and that the only impacted users were those who had downloaded the malicious version.
Despite Anthropic's denials, the incident has raised important questions about the role of AI in cybersecurity and the responsibility of technology firms in protecting their users. The use of AI in cybersecurity has become increasingly popular in recent years, with many firms relying on AI-powered tools to detect and respond to threats. However, the use of AI in cybersecurity also raises important questions about accountability and responsibility.
In this article, we will explore the details of the incident and examine the role of AI in cybersecurity. We will also discuss the implications of the incident for technology firms and their users, and explore the ways in which AI can be used to improve cybersecurity.
The incident began when an unknown party uploaded a malicious version of the Claude Code extension to Cursor's marketplace. The extension, which contained a persistent SSH backdoor, was available for download for approximately 11 hours before it was removed by Cursor. During this time, the malicious extension was downloaded by thousands of users, including developers and security professionals.
The malicious extension was designed to collect information about the host machine and user, including usernames, configured Git emails, and public IP addresses, as well as attempting to open a reverse SSH tunnel. The extension also contained a critical flaw that required admin rights on macOS and Windows to operate, but in the vast majority of cases, it did not have these rights and therefore failed to open the SSH tunnel.
Despite the failure of the SSH tunnel, the malicious extension still forwarded the collected host and user data to the attacker, as well as dropping the attacker's SSH key and installing the persistence mechanism. This meant that developers who had downloaded the malicious extension were required to go "threat hunting" to determine if their instance allowed for the SSH tunnel to be created successfully.
The incident has raised important questions about the role of AI in cybersecurity and the responsibility of technology firms in protecting their users. Anthropic's denials of involvement in the supply-chain attack have sparked debate about the company's position on AI and cybersecurity, and the implications of the incident for technology firms and their users.
In this article, we will explore the implications of the incident for technology firms and their users, and examine the ways in which AI can be used to improve cybersecurity. We will also discuss the role of Anthropic and Cursor in the incident and examine the steps that the companies have taken to address the issue.
The incident has also raised important questions about the responsibility of technology firms in protecting their users. Anthropic, as the firm behind the Claude Code extension, has a responsibility to ensure that its products are free from malware and other security threats. However, the incident has also highlighted the challenges of detecting and responding to security threats in the supply chain.
The use of AI in cybersecurity has become increasingly popular in recent years, with many firms relying on AI-powered tools to detect and respond to threats. However, the use of AI in cybersecurity also raises important questions about accountability and responsibility.
In this article, we will examine the ways in which AI can be used to improve cybersecurity and discuss the implications of the incident for technology firms and their users. We will also explore the steps that Anthropic and Cursor have taken to address the issue and examine the role of the companies in the incident.
The incident has also raised important questions about the role of AI in improving cybersecurity. The use of AI in cybersecurity has become increasingly popular in recent years, with many firms relying on AI-powered tools to detect and respond to threats. However, the use of AI in cybersecurity also raises important questions about accountability and responsibility.
In this article, we will explore the ways in which AI can be used to improve cybersecurity and discuss the implications of the incident for technology firms and their users. We will also examine the steps that Anthropic and Cursor have taken to address the issue and examine the role of the companies in the incident.
In conclusion, the incident has highlighted the importance of responsible AI development and deployment. Anthropic and Cursor have taken steps to address the issue, but the incident has also raised important questions about accountability and responsibility. The use of AI in cybersecurity has become increasingly popular in recent years, and it is essential that technology firms and their users understand the implications of this technology.
The incident has also raised important questions about the role of technology firms in protecting their users. Anthropic, as the firm behind the Claude Code extension, has a responsibility to ensure that its products are free from malware and other security threats. However, the incident has also highlighted the challenges of detecting and responding to security threats in the supply chain.
In this article, we will explore the implications of the incident for technology firms and their users, and examine the ways in which AI can be used to improve cybersecurity. We will also discuss the role of Anthropic and Cursor in the incident and examine the steps that the companies have taken to address the issue.
The implications of the incident for technology firms and their users are significant. The incident has highlighted the importance of responsible AI development and deployment, and it is essential that technology firms and their users understand the implications of this technology.
The incident has also raised important questions about accountability and responsibility. Anthropic, as the firm behind the Claude Code extension, has a responsibility to ensure that its products are free from malware and other security threats. However, the incident has also highlighted the challenges of detecting and responding to security threats in the supply chain.
In this article, we will explore the implications of the incident for technology firms and their users, and examine the ways in which AI can be used to improve cybersecurity. We will also discuss the role of Anthropic and Cursor in the incident and examine the steps that the companies have taken to address the issue.
In conclusion, the incident has highlighted the importance of responsible AI development and deployment. Anthropic and Cursor have taken steps to address the issue, but the incident has also raised important questions about accountability and responsibility. The use of AI in cybersecurity has become increasingly popular in recent years, and it is essential that technology firms and their users understand the implications of this technology.
The incident has also raised important questions about the role of technology firms in protecting their users. Anthropic, as the firm behind the Claude Code extension, has a responsibility to ensure that its products are free from malware and other security threats. However, the incident has also highlighted the challenges of detecting and responding to security threats in the supply chain.
In this article, we will explore the implications of the incident for technology firms and their users, and examine the ways in which AI can be used to improve cybersecurity. We will also discuss the role of Anthropic and Cursor in the incident and examine the steps that the companies have taken to address the issue.
Related Information:
https://www.ethicalhackingnews.com/articles/Anthropics-Denial-of-Allegations-Sparks-Debate-A-Deep-Dive-into-the-Claudeshop-Supply-Chain-Attack-ehn.shtml
https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682
Published: Fri Oct 30 12:16:12 2026 by llama3.2 3B Q4_K_M
