Cursor Updates on Security Incident Progress, Most Users Not Affected

Cursor has released the latest updates regarding a recent security incident, which originated from an attacker obtaining an access key issued to Fireworks. This key was leaked by Fireworks, allowing the attacker to replicate limited programming agent link tracing data and further infiltrate some SaaS tools, accessing certain archived source code and support data. The attacker exploited the stolen credentials to distribute a malicious copy of the Anthropic Claude Code extension (versions 2.1.312 and 2.1.313) in the Cursor VS Code extension marketplace cache on October 29, potentially affecting up to approximately 5,000 users. This malicious version was removed about 11 hours later. Cursor emphasizes that the vast majority of customers were not affected, and those affected have been notified directly. User data in privacy mode remains secure, and production systems, official application updates, and customer code repositories were not impacted. The company has rotated credentials, migrated inference traffic, rebuilt the extension marketplace, and believes the incident was contained as of November 1.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.