Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for ...
Help Net Security

Claude Code extension poisoned with persistent SSH backdoor

According to Cursor, turning on SSH requires admin rights the extension lacks on most Mac and Windows hosts, and on those machines the attacker could not have logged in through the tunnel. The company ...
Morning Overview on MSN

Tailscale patched SSH holes that let one hacked device reach root services elsewhere

Version 1.104.4 of Tailscale closes a set of flaws in the company’s built-in SSH server, the most serious of which let a ...
The Hacker News

Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale 1.104.4 fixes SSH forwarding flaws that could expose root-only sockets, while related issues remain unpatched in ...

[Morning Security Briefing] Is the convenience of passwordless access backfiring? The hidden trap of chain hijacking in remote connection 'Tailscale SSH'

Connecting from your home PC to company servers or your home NAS in an instant without entering a password—.A slightly ...
The Hacker News

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

Unpatched Tailscale SSH flaws could let attackers gain root on permitted servers from a compromised device when port ...