A backdoor in the Claude Code extension for VS Code has been discovered, allowing attackers to establish persistent SSH access on macOS, Linux, and Windows. The extension's persistence mechanism relies on a user-launch agent, making it difficult to detect. Remediation involves uninstalling the extension, killing active tunnel processes, removing persistence, and rotating credentials. Phorion's detection coverage flags the macOS persistence and provides visibility into the attack chain. AI summary
Firehose
Filtered to tagged “backdoor” · clear filters
Browse: People · Companies · Papers · Podcasts · Hacker News · Deep dives
Browse by tag
artificial intelligence 70continual learning 27AI 18open-weight models 15reinforcement learning 14agentic coding 12AI agents 11large language models 9tech 9AI safety 7benchmarks 7finance 7open-source 7robotics 7language models 6machine learning 6Reinforcement learning 6Diffusion models 5game development 5natural language processing 5Agentic AI 4anthropic 4computer vision 4cybersecurity 4data integration 4deep learning 4Recursive self-improvement 4Vercel 4video games 4AI infrastructure 3