Saturday, October 31, 2026 brief
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft Security
This story is part of the morning brief Northflank breach leads to abuse of customers' AI API keys. The reporting lives at the original source.
A hosting platform breach hits AI credentials, while AI-assisted attacks and malicious AI tooling dominate the week.