{"schemaVersion":1,"generatedAt":"2026-11-03T14:12:51.541Z","from":"2026-10-28","through":"2026-11-03","severity":null,"type":"incident","status":"ok","sources":{"ok":34,"total":34},"count":19,"advisories":[{"id":"incident:38b92803","type":"incident","advisoryId":"incident:38b92803","cveId":null,"title":"Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Langflow"}],"matchedTerms":["Langflow","AI"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/11/critical-langflow-flaws-could-let.html","summary":"The Hacker News reported a security matter involving Langflow on 2026-11-02 (vulnerability, flaw, flaws). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:c5c227ed","type":"incident","advisoryId":"incident:c5c227ed","cveId":null,"title":"New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude"},{"ecosystem":"product","name":"Gemini"},{"ecosystem":"product","name":"Kimi"}],"matchedTerms":["Claude","Gemini","Kimi","large language model","LLM","AI"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/11/new-volta-infostealer-uses-claude.html","summary":"The Hacker News reported a security matter involving Claude, Gemini, Kimi on 2026-11-02 (malware, infostealer). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:CVE-2026-105811","type":"incident","advisoryId":"CVE-2026-105811","cveId":"CVE-2026-105811","title":"CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Amazon Q"}],"matchedTerms":["Amazon Q"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"aws-security-bulletins","sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-126-aws","summary":"AWS security bulletins reported a security matter involving Amazon Q on 2026-11-02 (security bulletin). Tracks CVE-2026-105811."},{"id":"incident:CVE-2026-116635","type":"incident","advisoryId":"CVE-2026-116635","cveId":"CVE-2026-116635","title":"CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server","severity":"unknown","cvssScore":null,"affected":[],"matchedTerms":["mcp server"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"aws-security-bulletins","sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-164-aws","summary":"AWS security bulletins reported a security matter on 2026-11-02 (security bulletin). Tracks CVE-2026-116635."},{"id":"incident:CVE-2026-98432","type":"incident","advisoryId":"CVE-2026-98432","cveId":"CVE-2026-98432","title":"Backporting security fixes at scale with Codex","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Codex"},{"ecosystem":"product","name":"OpenAI"}],"matchedTerms":["Codex","OpenAI"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"trail-of-bits","sourceUrl":"https://blog.trailofbits.com/2026/11/02/backporting-security-fixes-at-scale-with-codex","summary":"Trail of Bits blog reported a security matter involving Codex, OpenAI on 2026-11-02 (vulnerability, vulnerabilities, flaw). Tracks CVE-2026-98432."},{"id":"incident:dbc90a46","type":"incident","advisoryId":"incident:dbc90a46","cveId":null,"title":"Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"}],"matchedTerms":["Claude Code","Cursor"],"disclosedAt":"2026-11-01","exploitation":null,"sourceId":"stepsecurity","sourceUrl":"https://www.stepsecurity.io/blog/claude-code-extension-trojanized","summary":"StepSecurity blog reported a security matter involving Claude Code, Cursor on 2026-11-01 (backdoor). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:40a14f1c","type":"incident","advisoryId":"incident:40a14f1c","cveId":null,"title":"A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"ChatGPT"},{"ecosystem":"product","name":"OpenAI"}],"matchedTerms":["ChatGPT","OpenAI"],"disclosedAt":"2026-10-31","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html","summary":"The Hacker News reported a security matter involving ChatGPT, OpenAI on 2026-10-31 (flaw, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:17174e35","type":"incident","advisoryId":"incident:17174e35","cveId":null,"title":"Anthropic: That Claude Code extension compromise… couldn't be us","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Anthropic"},{"ecosystem":"product","name":"Cursor"}],"matchedTerms":["Claude Code","Anthropic","Cursor"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"the-register-security","sourceUrl":"https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682","summary":"The Register security reported a security matter involving Claude Code, Anthropic, Cursor on 2026-10-30 (flaw, backdoor, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:3a3d44de","type":"incident","advisoryId":"incident:3a3d44de","cveId":null,"title":"Malicious Claude Code extension on Cursor planted SSH backdoors","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"},{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Claude Code","Cursor","Anthropic"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"bleepingcomputer","sourceUrl":"https://www.bleepingcomputer.com/news/security/malicious-claude-code-extension-on-cursor-planted-ssh-backdoors","summary":"BleepingComputer reported a security matter involving Claude Code, Cursor, Anthropic on 2026-10-30 (malicious, malware). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:8466af95","type":"incident","advisoryId":"incident:8466af95","cveId":null,"title":"Compromised Claude Code extensions (versions 2.1.312 & 2.1.313) in Cursor try to install a backdoor","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"},{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Claude Code","Cursor","Anthropic","AI"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"ox-security","sourceUrl":"https://www.ox.security/blog/malicious-claude-code-extension-cursor-ssh-backdoor","summary":"OX Security research reported a security matter involving Claude Code, Cursor, Anthropic on 2026-10-30 (vulnerability, backdoor, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:ea6ac210","type":"incident","advisoryId":"incident:ea6ac210","cveId":null,"title":"Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"},{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Claude Code","Cursor","Anthropic"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html","summary":"The Hacker News reported a security matter involving Claude Code, Cursor, Anthropic on 2026-10-30 (backdoor, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:250ac89f","type":"incident","advisoryId":"incident:250ac89f","cveId":null,"title":"Claude Model Builds Exploits Across Major Browsers & OSes","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude"}],"matchedTerms":["Claude"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"dark-reading","sourceUrl":"https://www.darkreading.com/application-security/claude-model-exploits-major-browsers-oses","summary":"Dark Reading reported a security matter involving Claude on 2026-10-29 (exploits). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:71f9eb62","type":"incident","advisoryId":"incident:71f9eb62","cveId":null,"title":"Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude"},{"ecosystem":"product","name":"ChatGPT"},{"ecosystem":"product","name":"Anthropic"},{"ecosystem":"product","name":"OpenAI"},{"ecosystem":"product","name":"GPT-5"}],"matchedTerms":["Claude","ChatGPT","Anthropic","OpenAI","GPT-5"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/fake-chatgpt-and-claude-apps-abuse.html","summary":"The Hacker News reported a security matter involving Claude, ChatGPT, Anthropic, OpenAI and 1 more on 2026-10-29 (malicious, malware). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:81725f5f","type":"incident","advisoryId":"incident:81725f5f","cveId":null,"title":"Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"OpenAI"},{"ecosystem":"product","name":"Claude Desktop"},{"ecosystem":"product","name":"Anthropic"},{"ecosystem":"product","name":"Codex"},{"ecosystem":"product","name":"GitHub Copilot"},{"ecosystem":"product","name":"Cursor"}],"matchedTerms":["OpenAI","Claude Desktop","Anthropic","Codex","GitHub Copilot","Cursor","prompt injection"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"the-register-security","sourceUrl":"https://www.theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508","summary":"The Register security reported a security matter involving OpenAI, Claude Desktop, Anthropic, Codex and 2 more on 2026-10-29 (vulnerability, vulnerabilities, flaw). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:e9e91cfc","type":"incident","advisoryId":"incident:e9e91cfc","cveId":null,"title":"Cohere’s Qwen Story: Looks More Like Model Jaggedness","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Qwen"},{"ecosystem":"product","name":"vLLM"}],"matchedTerms":["Qwen","vLLM","AI"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"checkpoint-research","sourceUrl":"https://research.checkpoint.com/2026/coheres-qwen-story-looks-more-like-model-jaggedness","summary":"Check Point Research reported a security matter involving Qwen, vLLM on 2026-10-29 (backdoor). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:f3663a8f","type":"incident","advisoryId":"incident:f3663a8f","cveId":null,"title":"Hugging Face malware campaign returns to hijack GPUs for crypto mining","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Hugging Face"}],"matchedTerms":["Hugging Face","AI"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"bleepingcomputer","sourceUrl":"https://www.bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining","summary":"BleepingComputer reported a security matter involving Hugging Face on 2026-10-29 (malware, hijack). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:fde2c075","type":"incident","advisoryId":"incident:fde2c075","cveId":null,"title":"Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Gemini"}],"matchedTerms":["Gemini","agentic"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/googles-gemini-4-carbon-leads.html","summary":"The Hacker News reported a security matter involving Gemini on 2026-10-29 (vulnerabilities, exploitation). No CVE is referenced; verify with the vendor before acting."},{"id":"osv:MAL-2026-2144","type":"incident","advisoryId":"MAL-2026-2144","cveId":null,"title":"Malicious code in litellm (PyPI)","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"pypi","name":"litellm"}],"matchedTerms":["litellm"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"osv-malicious","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-2144","summary":"OSV lists litellm (pypi) as malicious in MAL-2026-2144, versions 1.82.7, 1.82.8, 1.107.0. Remove or pin away from the affected versions."},{"id":"incident:386fae52","type":"incident","advisoryId":"incident:386fae52","cveId":null,"title":"Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Anthropic","AI"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/anthropics-unreleased-ai-model-chains.html","summary":"The Hacker News reported a security matter involving Anthropic on 2026-10-28 (flaw, flaws, exploits). No CVE is referenced; verify with the vendor before acting."}]}