How Cortex AES Protects Against Compromised Claude Code Extensions
On October 29, 2026, attackers turned a trusted developer tool into a potential backdoor. Malicious versions of the Claude Code extension were distributed through Cursor's extension marketplace, exposing developers to malware capable of collecting host information, establishing persistence, and attempting to enable unauthorized remote access. In just 11 hours, up to 5,000 Cursor users were potentially exposed.1...
