News linked to both this project and an event.
Odaily reports: Cursor, the AI coding tool under SpaceX, posted on X: "We have discovered a security incident affecting a tampered Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, affecting up to 5,000 users. This malicious extension version was not developed by Anthropic, and it does not affect other extensions downloaded from the official website, Grok Bot, Grok, or our other SpaceXSI products.In response, we shut down the extension marketplace this afternoon, worked with the relevant service providers to remove the malware, and reopened the marketplace after confirming there was no further risk. If you are affected, please refer to the instructions in the official blog post to learn how to identify the malicious package and take measures to mitigate any potential impact. We have asked all customers to update Claude Code for VS Code to version 2.1.314."
According to EU-Startups, AI security startup Mindgard announced the completion of a €26 million (approximately $30 million) Series A funding round, led by Album VC, with participation from Karma Ventures, .406 Ventures, Atlantic Bridge, IQ Capital, and Lakestar. Mindgard was founded by Dr. Peter Garraghan in 2022, incubated by Lancaster University in the UK, and is headquartered in Boston and London. The company's platform provides Shadow AI discovery, AI red teaming, and runtime AI protection capabilities, and has helped disclose over 150 high-impact AI security vulnerabilities, covering issues such as the Cursor IDE zero-day code execution vulnerability, Google Antigravity trusted workspace defects, and ChatGPT image generation protection failures.
Coinbase, a cryptocurrency trading platform, has disclosed in a technical sharing session that its internal multi-agent development tool "Mux" is reshaping software engineering workflows, transitioning the engineer's role from traditional code implementers to task orchestrators for AI agents.With the widespread internal adoption of AI programming tools such as Cursor, Copilot, OpenCode, and Claude Code, code generation efficiency has significantly improved. However, development workflows have long remained stuck in a traditional "single-task, single-branch, sequential execution" mode, creating a new collaboration bottleneck.Mux was born as an internal tool against this backdrop. By assigning each AI agent an independent git worktree, branch, and terminal environment, the system enables parallel multi-task development and conflict-free collaboration, allowing engineers to simultaneously direct multiple agents to handle tasks such as API development, test writing, vulnerability fixes, and code refactoring.Data shows that as of April 2026, Mux has covered over 600 users within Coinbase (including engineers, product managers, and designers), with 335 actively using it and 197 being high-frequency users. It has facilitated over 5,000 PR merges across 461 code repositories and 10 organizations. Engineers using Mux achieved an average of 39.6 PR merges, approximately 3.5 times the baseline of 11.4.Coinbase stated that Mux's success relies on its internal infrastructure capabilities, including an LLM Gateway, secure model access, and a code flow deployment system, enabling deep integration of multi-agent tools into real development workflows. This trend marks a structural shift in the software engineering paradigm: as AI reduces the cost of code generation, the core value of engineers is transitioning from "implementation capability" to "problem definition and agent orchestration capability."
According to a research report released by cybersecurity firm Expel, the company is tracking an advanced persistent threat (APT) group dubbed “HexagonalRodent,” which is highly assessed to be a North Korean (DPRK) state-sponsored actor. This group primarily targets Web3 developers and specializes in stealing high-value digital assets—including cryptocurrencies and NFTs. In the first quarter of 2026 alone, the group compromised 2,726 developer devices and stole access credentials for 26,584 cryptocurrency wallets, with the total value of stolen assets reaching as high as $12 million. The group primarily carries out its attacks via fake job postings—publishing lucrative positions on LinkedIn and Web3 recruitment platforms to lure job seekers into completing “skills assessments” embedded with malicious code. These assessments exploit VSCode’s tasks.json functionality to automatically execute malware when victims open the project folder. The malware used includes BeaverTail, OtterCookie, and InvisibleFerret, all of which possess capabilities such as password theft, remote control, and reverse shell execution. Notably, the group extensively leverages generative AI tools—including ChatGPT and Cursor—to develop malware, build counterfeit corporate websites, and generate AI-forged executive teams. It even registered a shell company in Mexico to enhance the credibility of its operations. Additionally, the group recently carried out its first-ever supply-chain attack, successfully infiltrating a VSCode extension.