Tech · Culture · Fiction
Article SSH backdoor shipped in Cursor's Claude Code extension
Phorion found an SSH backdoor in Claude Code for VS Code 2.1.312 and 2.1.313 on the Cursor Marketplace. How the implant works and how to remove it.
One WAP Push SMS crashes Android below the October 2026 patch
A malformed WAP Push SMS crashes com.android.phone on unpatched Android, dropping calls and looping reboots. How it works, recovery, and the October 2026 fix.
TeamViewer bug lets the host attack the viewer
TeamViewer's CVE-2026-111585 lets a controlled host crash or run code on the viewer connecting to it. Fixed in 15.83, with no workaround.
A 2.7 that silences logs
Warp Panda exploited VMware ESX logging flaw CVE-2026-41709 as a zero-day against U.S. law firms to cut audit-trail visibility. CISA added it to the KEV catalog.
Hacktivists leak 40,000 DHS personnel records
The Department of Peace stole records on more than 40,000 DHS employees by subverting single sign-on; DDoSecrets posted the data online.
macOS command-line tools still trust the compromised eMudhra certificates
macOS still ships git, curl and python3 that trust the compromised eMudhra CA, and 27.2 reverted the manual fix. How to check and mitigate.
Monday's iOS 18.7.11 backports a CoreGraphics fix to older iPhones
Apple backported the fix for exploited CoreGraphics flaw CVE-2026-86950 to iOS and iPadOS 18.7.11, extending it to older iPhone and iPad models.
The Wire — latest
All →- Ancient Artifacts Surface as Norwegian Ice Patches Melt
- Backdoored Anthropic Extension Threatens 5,000 Cursor Users
- BeOS Now Runnable in Browser via Infinite Mac Project
- Boom's Airliner Delayed as Company Builds Data Center Turbine Business
- ChatGPT Sandbox Flaw Exposed Private Chats Through Share Links
- Cisco Empowers Gen Z Engineer to Modernize Legacy Code with Unlimited AI
- Cloudflare: DDoS Attacks Surge 38% in Q3 with Shift to Smaller, Frequent Strikes
- NASA Seeks Commercial Rescue Options for Aging Hubble Telescope
- nesformer Embeds NES Emulator in Qwen3.5-4B Model
- Rust Library Solves Cloudflare Turnstile Without Headless Browser
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.