[Action Required] Malicious version (2.1.313) of Cursor's Claude Code extension: Affected times in JST and how to check/remove it in 1 minute

On October 29, 2026, the AI code editor Cursor announced that version 2.1.313 of the "Anthropic.claude-code" extension, ...

[Brotli Vulnerability] It's not just Node.js! How to check for and respond to CVE-2026-111497

Following PHP and Java, the compression library "Brotli" is now the subject of a vulnerability. Looking at the name alone, ...
Microsoft

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...
The Next Web

Microsoft ships emergency .NET fixes for a critical Brotli flaw

Node.js says the Brotli decoder ‘kept appending input bytes to an eight-byte internal buffer’. Microsoft has now patched .NET ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.