Backdoors in official Claude Code extensions
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
Polymarket temporarily stopped trading on its international platform for nearly an hour after a third-party service provider was compromised. The company said it had found and fixed an issue affecting Polymarket.com and referred the incident to law enforcement. Trading resumed at 3 p.m. Eastern time on Thursday. Users reported on the platform’s Discord channel that their crypto wallets had been emptied, though Polymarket did not confirm individual losses. The Block, citing blockchain analytics group Arkham, reported that about $2.65 million in cryptocurrency had been taken. Polymarket said affected traders would be fully reimbursed. Its U.S.-based platform did not appear to be affected.
The incident highlights the security risks posed by attacks on vendors that provide services to large online platforms, and it stands out because users may have lost funds. Polymarket was valued at $21 billion in September after investors led by Donald Trump Jr. put $1 billion into the company. The platform and rival Kalshi are also at the center of a legal and political dispute over whether states or the federal government should regulate prediction-market betting. Separately, Polymarket is investigating reports of suspicious wagers around Israel’s elections and the U.S. midterms, amid broader concerns about insider trading on prediction markets. Kalshi has also examined suspicious bets related to President Donald Trump’s choice of press secretary.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
A compromised Claude Code extension version 2.1.313 distributed malware that collected developer device details and attempted to install a persistent SSH backdoor. Anthropic replaced the extension with version 2.1.314, but affected devices may still need remediation. (doublepulsar.com)
A compromised Claude Code extension version 2.1.313 attempted to steal device information and install a persistent SSH backdoor on developer computers. Anthropic replaced the extension, but the update does not remove backdoors from devices already infected. (doublepulsar.com)
Researchers report five full cross-tenant compromises in Azure linked to a common underlying weakness. The cases highlight risks to tenant isolation in Microsoft’s cloud platform. (binarysecurity.no)
Binance suffered a $6.3 billion security breach, described as the largest cryptocurrency theft on record, and froze withdrawals. Blockchain intelligence firm TRM blamed North Korea’s TraderTraitor hacking unit; Binance said it was working with law enforcement and that customer funds were safe. (theguardian.com)
A compromised Claude Code for VS Code extension, version 2.1.313 on the Cursor Marketplace, installed a persistent SSH backdoor and sent host information to attackers across macOS, Linux, and Windows. Cursor removed the release; organizations should check for the affected extension and investigate any installations. (phorion.io)
Today's best Hacker News stories, summarized and screenshotted, one email a day.