#API Key Leak
One Leaked Vendor API Key Opened the Door to a Backdoored Claude Code Extension, Cursor Says
Cursor has traced its October security incident to a single access key exposed by AI infrastructure vendor Fireworks AI, which an attacker used to pivot from stolen session...