Claude Code Extension Hid an SSH Backdoor | Threat

Could a trusted Claude Code extension on the Cursor marketplace secretly give hackers SSH access to your computer? This week on Hack5 ThreatWire, we investigate the malicious extension that affected nearly 5,000 users, a massive cryptocurrency theft, and the latest cybersecurity threats involving Apple spyware, hacked refrigeration systems, and online privacy.

⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️

@endingwithali →
Twitch: https://twitch.tv/endingwithali
Twitter: https://twitter.com/endingwithali
YouTube: https://youtube.com/@endingwithali
Everywhere else: https://links.ali.dev

Want to work with Ali? hak5@endingwithali.com

LINKS
🔗 Story 1: Finally Covering A Cyptocurrency Hack
https://arstechnica.com/security/2026/10/hackers-steal-6-3-billion-from-binance-in-record-crypto-heist/
https://x.com/binance/status/2115993361517891592
https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html
https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack
🔗 Story 2: Claude Extension Hacked
https://arstechnica.com/security/2026/10/anthropic-vs-code-extension-on-cursor-backdoored-for-nearly-12-hours/
https://x.com/cursor_ai/status/2116074289053175808
https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html
https://opensourcemalware.com/blog/trojanized-claude-code-extension-plants-persistent-ssh-backdoor
https://cursor.com/blog/claude-code-extension-security-notice
🔗 Story 3: Throw Back Story
https://developer.chrome.com/release-notes/154#ask_before_http_on_by_default
https://www.engadget.com/cybersecurity/google-chrome-will-finally-default-to-secure-https-connections-starting-in-april-170000603.html
https://www.bleepingcomputer.com/news/google/google-chrome-to-warn-users-before-opening-insecure-http-sites/
https://security.googleblog.com/2025/10/https-by-default.html

🔗 Story 4: BSides News
https://thehackernews.com/2026/10/attackers-heat-french-supermarket.html
https://www.bleepingcomputer.com/news/security/hackers-disrupt-refrigeration-systems-at-european-supermarkets/
https://tech-insider.org/ao3-down-security-incident-possible-data-breach-2-4-weeks-2026/
https://www.bleepingcomputer.com/news/security/discord-to-let-search-engines-index-public-server-messages/
https://www.reddit.com/r/mildlyinfuriating/comments/1xh9epf/discord_messages_from_public_servers_will_be/
https://therecord.media/apple-warns-users-99-countries-mercenary-spyware
https://www.bleepingcomputer.com/news/security/reddit-to-lock-content-behind-logins-to-fight-scrapers/
https://www.reddit.com/user/spez/comments/1xiupm0/about_that_login_screen/
—–☆—–☆—–☆—–☆—–☆—–☆—–☆—–☆—–☆—–☆
Our Site → https://www.hak5.org
Shop → http://hakshop.myshopify.com/
Community → https://www.hak5.org/community
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
____________________________________________

Founded in 2005, Hak5’s mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.Hak5Read More