Source: https://agentdast.com/newsletter/page/2

# Security Brief, page 2

Recent hacks, important CVEs, and the steps that reduce your exposure.

[By Tornike (@realtornikeo)](https://x.com/realtornikeo)

[Free JSON API](https://agentdast.com/api/incidents/openapi.json) · [Compare website security tools](https://agentdast.com/guides#compare)

 Incident Nov 3, 2026

## [Malicious Claude Code extensions in Cursor: check your developer machines](https://agentdast.com/newsletter/cursor-claude-code-extension-compromise)

Affects

Anthropic.claude-code in Cursor's marketplace: 2.1.312 and 2.1.313

Severity

Critical impact on affected devices

[Read the brief](https://agentdast.com/newsletter/cursor-claude-code-extension-compromise)

 Vulnerability Nov 3, 2026

## [Next.js security update: two code-execution risks and a Server Actions fix](https://agentdast.com/newsletter/nextjs-october-2026-security-update-cve-2026-96889)

Affects

Next.js Cache Components: 16.0.0 through 16.4.0; Next.js image optimization: 10.0.0 through 15.5.27; above 16.0.0 through 16.4.0; Next.js Server Actions: 13.0.0 through 15.5.27; 16.0.0 through 16.4.0

Severity

Critical: CVSS 9.5

`CVE-2026-96889``GHSA-673q-mjm6-r5xr``GHSA-p3m5-59mp-jv5r`

[Read the brief](https://agentdast.com/newsletter/nextjs-october-2026-security-update-cve-2026-96889)

[Newer briefs](https://agentdast.com/newsletter) Page 2 of 2 

Original summaries from vendor advisories and security research, with links to the evidence. Each brief separates what happened, who is affected, and what to do next.