Stolen Fireworks AI Key Led to Cursor Data Breach and Trojanized Claude Code Extension

The Hacker News - Nov 15, 2026

The compromise of Anthropic's official Claude Code extension on Cursor's extension marketplace was the result of the theft of an access key that was exposed in the wake of a breach targeting Fireworks AI. "An attacker obtained an access key we had issued to Fireworks," Cursor said in a Friday update. "The key was exposed by Fireworks, and the attacker used it to copy data from a read-only

Read full article

More News

Kick Connect
About Us

Kick Connect publishes a comprehensive overview of the latest news and theories on science & technology. We also report accurate news with a unique perspective on the world around us.