GLOBAL – October 30, 2026 -- A maliciously modified build of the Anthropic.claude-code extension, version 2.1.313, sat in the Cursor VS Code Extension Marketplace for about 11 hours on October 29, 2026, potentially exposing up to 5,000 users, according to Cursor. Anthropic did not develop the malicious version.

Global – October 24, 2026 -- Agentic intrusions tripled in the second half of 2026 compared with the first half, according to CrowdStrike data, as threat actors hand hacking decisions and command execution to AI agents.

CrowdStrike's report, published on Wednesday, documents four threat actors. Two used sophisticated AI harnesses, the software that connects a large language model to external resources. Two used simpler setups. The firm said the main constraint on scaling such campaigns is "token budgets," not engineering complexity.