Una extensión de Anthropic comprometida en Cursor amenazó a 5.000 desarrolladores, pero la empresa aún no ha advertido a los clientes sobre la violación de seguridad.
Resumen generado con IA. Consulta el original para comprobar el contexto y la precisión.
Este es el extracto disponible del feed. Puede estar abreviado o en el idioma original.
An official extension for Anthropic’s Claude model was backdoored and threatened as many as 5,000 developers' machines, multiple sources reported Friday. Anthropic so far has yet to warn customers of the incident. The compromised package was a VS Code extension available in the marketplace of Cursor, a maker of AI-assisted developer tools, the company said Friday. The malicious version, 2.1.313, subsequently affected “at most 5,000 users,” presumably when they either downloaded it or their systems automatically fetched and installed it. Anthropic pushed version 2.1.314 several hours after the previous version became available on Cursor, according to independent researcher Kevin Beaumont. Both Beaumont and the CTO and co-founder of security firm Phorian said that version 2.1.313 was distributed through Anthropic’s official account on Cursor. So far, neither Cursor nor Anthropic has explained how the attackers gained control of the account. In search of cloud credentials “It was a supply-chain compromise where the attacker gained access to the official distribution channel,” Phorian CTO and co-founder Luke Roberts told Ars. “The malicious version 2.1.313 was posted to the official Anthropic account, effectively superseding 2.1.312. Extensions auto-update in Cursor by default, but users can configure this in settings.” Phorian has more details here.Read full article Comments
Una ayuda automática para ordenar, basada en fuentes, palabras clave y entidades, en una escala de 1–12. Alta: 9–12; media: 6–8; baja: 1–5. No mide urgencia, verifica noticias ni representa respaldo editorial.
El supuesto hackeo de Binance atribuido a Corea del Norte demuestra el creciente poder y la amenaza que representan los ciberdelincuentes patrocinados por el Estado para los sistemas financieros globales.
El posible papel de Nvidia como codesurante del préstamo para el centro de datos de Nscale señala una fuerte confianza en la industria, lo que ayuda a tranquilizar a los inversores sobre la viabilidad de los masivos gastos en infraestructura de IA.
La NASA busca ideas del público para prolongar la vida útil del Telescopio Espacial Hubble, ya que, sin intervención, se desorbitará de forma natural en la década de 2030.