Computing & Cybersecurity
Processors, computers, and digital defense
Tampered Claude Code extension exposes the risks of trusted developer marketplaces
Cursor disclosed a malicious Claude Code-branded extension distributed through its marketplace. The injected code attempted SSH persistence, and replacing the extension alone may not remove it.
Alpine's GitLab incident reveals why a server upgrade may leave Ruby flaws exposed
Alpine Linux disclosed attempted exploitation of a critical GitLab flaw and found that upgrading its self-built server had not updated the vulnerable Ruby component.
CISA’s 2030 plan shifts the cyber-defense focus toward keeping critical services running
A new U.S. cyber strategy lays out three priorities—defend, harden and prevail—while promising a review of agency capabilities and a greater emphasis on measurable critical-infrastructure resilience.
Oracle's emergency Java alert puts certificate trust back on the patching agenda
Oracle issued an out-of-cycle Java and GraalVM security alert tied to eMudhra root certificates, highlighting why trust-store updates need the same attention as application patches.