Hacking 🔍 Cursor due to a malicious code extension calls for attackers to use credentials stolen using Fireworks AI access to pull historical coding traces, some of which contain unknown secrets, and then exposed internal credentials to push a distributed cloud code extension built using its market cache. The malicious versions were available for 11 hours on October 29, and may have reached 5,000 users. Cursor published the chain in its event report. The case shows how AI dev platforms can be compromised using third-party peering infrastructures, stored agent traces, and extension paths in one sequence. The operational impact wasn't limited to data exposure: the payload attempted continuous SSH access on key systems, turning a backdoor into endpoint risk. 🛰️ Open sources - closed narratives.

Hacking 🔍 Cursor due to a malicious code extension calls for attackers to use credentials stolen using Fireworks AI access to pull historical coding traces, some of which contain unknown secrets, and then exposed internal credentials to push a distributed cloud code extension built using its market cache. The malicious versions were available for 11 hours on October 29, and may have reached 5,000 users. Cursor published the chain in its event report. The case shows how AI dev platforms can be compromised using third-party peering infrastructures, stored agent traces, and extension paths in one sequence. The operational impact wasn't limited to data exposure: the payload attempted continuous SSH access on key systems, turning a backdoor into endpoint risk. 🛰️ Open sources - closed narratives.