Cursorの独自マーケットプレイスで公式Claude Code拡張機能が一時改ざんされ、SSHバックドアが混入した。実装上の不備で遠隔操作の多くは失敗したものの、永続化処理が残存するため、手動によるファイル駆除と安全な端末からの鍵更新が必要となる。

An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers’ machines, ...

Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still ...

Plex Media Server vulnerabilities face active exploitation, prompting urgent updates to version 1.43.3.10861. Secure your ...

Many Linux veterans still vouch for Vim for editing documents and writing code. As a Linux user myself, I can see why. When ...

Anthropic sandbox-runtime (srt) is the open-source, OS-level sandbox behind Claude Code. It restricts file and network access ...

GitLab issued emergency patches for a CVSS 10.0 flaw letting attackers run code without logging in, affecting versions back ...

Large-scale unauthorized access and information leaks are occurring one after another both in Japan and overseas. As things ...

Thank you for your hard work dealing with the recent string of vulnerabilities. It is difficult to stay calm when you have to ...

GitLab has released emergency security updates addressing a critical remote code execution vulnerability that could allow ...