A tampered Claude Code extension in Cursor's marketplace tried to plant an SSH backdoor on up to 5,000 PCs. Here is what it did and how to check yours.

From boat-racing bots to OpenAI models inside Hugging Face, here's how AI reward hacking works and why it matters.

Get an IRS Identity Protection PIN. This six-digit number prevents someone else from filing a tax return using your information and collecting your refund. The IRS says the easiest way to get an IP PIN is by logging into your online account.

Cursor, the coding-tool company owned by SpaceX, informed that a maliciously modified version of Anthropic’s Claude Code extension was available in its Cursor V

Update, July 22, 2025: This story, originally published on July 20, has been updated with an expert counterpoint to the idea that it’s the delivery mechanism being what’s important in the latest password hack attack analysis. At the heart of the ...

For more than a decade, the cybersecurity industry has been assigning names to different hacking groups. Some of them, like Fancy Bear, have crossed over into the mainstream because of their prominent hacks and memorable names. Others are only known within ...

Map cross-domain privilege escalation to sever breach routes at key choke points. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. FBI Cyber Division's Brett Leatherman ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Update, March 28, 2025: This story, originally published March 25, has been updated with new research into the ...

The Zeroday Cloud hacking competition in London has awarded researchers $320,000 for demonstrating critical remote code execution vulnerabilities in components used in cloud infrastructure. The first hacking event focused on cloud systems, the competition ...