Cybersecurity Incidents: A Very Bad Week

The video recounts several major security incidents, from compromised developer software to a historic crypto theft and a Linux kernel vulnerability that AI helped exploit.

Key Incidents

• Cursor extension exposed users: Cursor accidentally released an official Claude Code extension that could search users’ machines for keys and tokens and create a back door. It was available for about 11 hours and installed by roughly 5,000 people. The required administrator privileges limited the potential impact.

• Polymarket users lost funds: A compromised performance-monitoring script from DebugBear caused users’ positions to be sold and the proceeds sent to a hard-coded wallet. The attackers stole more than $2 million before Polymarket removed the script.

• Binance suffered a record-breaking theft: Attackers reportedly compromised a DevOps laptop and used Binance’s own systems to authorize withdrawals totaling $6.3 billion across 10 blockchains in about 20 minutes. The FBI attributed the attack to the North Korean group TraderTraitor. Stablecoin issuers froze about $3 billion, Binance paused withdrawals and replenished its wallets, then later showed its reserves were fully backed. Users subsequently withdrew $3.6 billion.

• A Linux kernel bug enabled remote root access: A flaw in TCP connection handling, present since 2016, could cause the kernel to use memory after it had been freed. With carefully timed packets, attackers could manipulate the server’s response. The vulnerability received a 9.8/10 CVSS score.

• Anthropic’s red team gave the flaw to an unreleased Claude model. In about 48 minutes, it got the server to reveal a kernel memory address; five minutes later, it was running commands as root.
• Debian and Oracle released fixes quickly. Red Hat patched later, while Ubuntu had not yet released a fix at the time of the video.

Sponsor Mention

The video promotes CodeRabbit Secure, a code-security service that reviews pull requests, scans codebases for vulnerabilities, prioritizes risks, and suggests fixes. It offers a 14-day free trial with no credit card required.