Security firm Phorion says versions 2.1.312 and 2.1.313 of the official Claude Code for VS Code extension on the Cursor Marketplace carried a backdoor that plants an attacker's SSH key, opens a reverse tunnel, sets up persistence and beacons host details. Cursor has removed both versions; on macOS, Phorion notes, a bug in the malware's own check often stops it from switching SSH on.
The Competition and Markets Authority has opened a Competition Act investigation into whether Meta is abusing a dominant position with terms that could let it collect content from publishers' and businesses' websites for its own products, including AI features, without giving them a choice. Meta paused the terms' rollout on 28 October; the CMA says no decision on lawbreaking has been made.
The Justice Department has charged five people and seized more than $750,000 in cryptocurrency from a network associated with Kenyan nationals, alleging fraudsters used stolen identities to pose as students and AI to fill out aid applications, complete coursework and feign attendance at virtual sessions. Officials say they identified more than $32 million in actual loss tied to these subjects.
Senators Ron Wyden and Edward Markey wrote to Mark Zuckerberg about 'serious privacy and safety risks' of Meta's AI smart glasses, citing reports of men secretly filming women and contractors saying they reviewed footage of people undressing. They asked about recording-indicator tampering, face blurring, use of imagery to train AI and whether Meta did safety testing before launch.
Democratic congressional candidate Kelly Kirschner, who has never been arrested, demanded that Republican rival Sydney Gruters pull a campaign ad in Florida's 16th District race that uses AI-generated imagery to show him in a police 'perp walk' and on an investigator's evidence board. His campaign says the ad intentionally minimised the AI disclosure required under Florida law.
Two juveniles have been charged in Alabama over an AI-generated explicit image of an underage high school student, a district attorney confirmed, though juvenile confidentiality laws keep the specific charges confidential. The student's mother says two teenage boys made the image from a photo on her daughter's Instagram account and initially received five-day school suspensions.
The Crown is seeking two years in prison and 36 months' probation for Justin Tillery, 38, a former girls' football coach in Alberta who pleaded guilty to making and possessing child pornography after admitting he used an AI program to create naked images of some of his players. Sentencing arguments were heard Friday.
The Andhra Pradesh High Court, citing discrepancies, declared an affidavit 'a product of artificial intelligence' in an October 27 order, warning that AI 'should be used as a tool, not as a master substitute' and that verifying every authority and fact rests with the advocate. It dismissed the plea, saying a writ petition was not the proper remedy.
Former Singapore president Halimah Yacob said on 15 April she will file a police report over a circulating deepfake video, her voice included, that allegedly shows her criticising the government, as Singapore heads into a general election. She did not share the video, urging Singaporeans: 'Don't resort to dirty tactics like this.'
