# Cognition — A Practical Guide to Security in November 2026

- Company: Cognition (cognition.com)
- Announced: 2026-11-03T17:00:00+00:00
- Category: not stated
- Coverage: not counted
- Announcement: no
- Group: routine
- Source: https://cognition.com/blog/practical-guide-to-security-november-2026
- Record: https://forck.live/items/31237-a-practical-guide-to-security-in-november-2026
- Subject: Devin / SWE

Cognition has published a practical security guide for companies after a run of incidents that included the $6.34 billion Binance theft and a malicious Claude Code Cursor extension. The post argues that long-standing security practices still work, because attackers do not need sophisticated AI to exploit an unpatched server or a stolen credential, and that AI mainly makes attacks faster and cheaper. It recaps the Binance breach, in which malware on engineers' laptops, delivered through a fake job interview and a tampered installer, let North Korean state-sponsored hackers reach the wallet signing service. Cursor disclosed on October 29 that an adversary published a malicious version of the Claude Code Cursor extension that tried to install a persistent backdoor, and fewer than 5,000 users installed it. The guide also lists critical vulnerabilities in PHP, GitLab, edge devices, KVM and the Linux TCP stack, plus a certificate authority that set its private key to the number 4. It recommends immediate steps such as phishing-resistant MFA, auditing public-facing systems, and rolling out password managers and ad blockers, with MDM and EDR on every corporate device within 30 days.

## Evidence

Verbatim from https://cognition.com/blog/practical-guide-to-security-november-2026:

> I wouldn’t blame you if you’re having trouble keeping up with all of the security incidents over the last few weeks.
> 
> Over a two-week period, we saw the largest theft in recorded history , a PHP vulnerability so critical that governments took their websites down , and a compromised Claude Code Cursor extension that tried to backdoor developer machines. Not to mention critical vulnerabilities in edge devices, a GitLab remote code execution vulnerability, and a certificate authority that set its private key to the number 4.
> 
> So, what do we make of this? Is it time to toss out all of our computers? Not quite.
> 
> The good news is that the security best practices we’ve known about for years still work. An attacker doesn’t need sophisticated AI to exploit an unpatched server or use a stolen credential, and when companies leave those paths open, techniques that have worked for years still succeed. AI makes attacks faster and cheaper, but it doesn’t stop you from closing off entire, basic attack paths. What’s changed is the urgency. In November 2026, you can’t wait and hope you won’t be targeted.

---

Record: https://forck.live/items/31237-a-practical-guide-to-security-in-november-2026
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md