Backdoors in official Claude Code extensions
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
The U.S. No Fly List is a secret federal roster used by the FBI’s Terrorist Screening Center, the TSA’s Secure Flight program, and airlines to prevent designated people from boarding commercial flights to, from, or within the United States. Created after the September 11 attacks alongside a separate list for passengers needing extra screening, it expanded from hundreds of names in 2001 to tens of thousands: reported figures include 21,000 in 2012, more than 47,000 in 2013, and 81,000 in 2016. It is distinct from the much larger Terrorist Watch List. The list’s stated purpose is aviation security, but its size and criteria have shifted with threat assessments, and related screening databases also inform systems used by Canada and Australia.
The central tension is security versus due process. People with names matching listed individuals have been wrongly delayed or prevented from traveling, while secrecy makes it difficult to learn why someone was listed or challenge the decision. Critics warn of privacy violations, discrimination, and inadequate remedies; the TSA established an identity-redress process to address mistaken matches. The list has also figured in debate over gun purchases: federal law does not automatically bar listed people from buying firearms, and government data cited in the account show watch-list individuals succeeded in more than 90 percent of reported purchase attempts from 2004 to 2010. Proposals to restrict such purchases failed amid disputes over effectiveness and constitutional protections. The screening system also relies on accurate ticket names and authentic boarding passes and identification.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
A compromised Claude Code extension version 2.1.313 distributed malware that collected developer device details and attempted to install a persistent SSH backdoor. Anthropic replaced the extension with version 2.1.314, but affected devices may still need remediation. (doublepulsar.com)
A compromised Claude Code extension version 2.1.313 attempted to steal device information and install a persistent SSH backdoor on developer computers. Anthropic replaced the extension, but the update does not remove backdoors from devices already infected. (doublepulsar.com)
Researchers report five full cross-tenant compromises in Azure linked to a common underlying weakness. The cases highlight risks to tenant isolation in Microsoft’s cloud platform. (binarysecurity.no)
Binance suffered a $6.3 billion security breach, described as the largest cryptocurrency theft on record, and froze withdrawals. Blockchain intelligence firm TRM blamed North Korea’s TraderTraitor hacking unit; Binance said it was working with law enforcement and that customer funds were safe. (theguardian.com)
A compromised Claude Code for VS Code extension, version 2.1.313 on the Cursor Marketplace, installed a persistent SSH backdoor and sent host information to attackers across macOS, Linux, and Windows. Cursor removed the release; organizations should check for the affected extension and investigate any installations. (phorion.io)
Today's best Hacker News stories, summarized and screenshotted, one email a day.