From the source
Cognition has published a practical security guide for companies after a run of incidents that included the $6.34 billion Binance theft and a malicious Claude Code
Cursor extension.
- The post argues that long-standing security practices still work, because attackers do not need sophisticated AI to exploit an unpatched server or a stolen credential, and that AI mainly makes attacks faster and cheaper.
- It recaps the Binance breach, in which malware on engineers' laptops, delivered through a fake job interview and a tampered installer, let North Korean state-sponsored hackers reach the wallet signing service.
- Cursor disclosed on October 29 that an adversary published a malicious version of the Claude Code Cursor extension that tried to install a persistent backdoor, and fewer than 5,000 users installed it.
- The guide also lists critical vulnerabilities in PHP, GitLab, edge devices, KVM and the Linux TCP stack, plus a certificate authority that set its private key to the number 4.
- It recommends immediate steps such as phishing-resistant MFA, auditing public-facing systems, and rolling out password managers and ad blockers, with MDM and EDR on every corporate device within 30 days.
