Cybersecurity news, explained

Breaches, hacks, major outages and AI security incidents as they happen. Every story covers what happened, why it happened and how to defend against it.

Live desk Last story

Top story Data Breaches Cursor confirms breach via Fireworks AI key led to malicious Claude Code extensionCursor's incident report traces the attack from a key held by a third-party AI provider to backdoored extensions that sat on its marketplace for about 11 hours.Cursor said attackers obtained an access key stored at Fireworks AI, then used credentials found in stored coding-agent traces to reach more systems.Malicious Claude Code extension versions 2.1.312 and 2.1.313 were available for approximately 11 hours before Cursor removed them.Cursor estimates up to 5,000 users may have received the malicious builds.Read the full story, 7 min

Latest stories

Vulnerabilities CISA adds exploited UnrealIRCd flaw CVE-2026-114713 to KEV catalogue alongside Check Point bugAttackers are already trying a command injection bug in the open-source IRC server, and CISA has told federal agencies to fix it and a Check Point flaw by 16 November.High · 7 min read

In the news