31-Oct-2026: Cursor, Apple, OpenAI and TeamViewer Face Escalating Cyber Threats

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Here are five developments shaping risk for security leaders and decision-makers. 1. A malicious Claude Code extension remained in Cursor’s marketplace for about 11 hours, potentially exposing 5,000 developers to malware designed to collect system data and install persistent SSH access. Cursor removed it, audited the marketplace, rotated keys, and urged users to check for the svc-telemetry key and isolate affected systems. 2. Apple warned users in 99 countries about suspected mercenary spyware infections, extending alerts to more than 150 countries since the program began. Journalists and filmmakers were reportedly among those targeted, highlighting the continuing threat to civil society and the need for stronger device security. 3. The n0n ransomware group reportedly targeted 23 organizations across 14 countries using stolen credentials, exposed cloud keys, automated scanning, and AI-assisted attack development. Data and backups were deleted in some incidents, while the gang’s exposed server revealed its tools and methods—showing both the scale of AI-enabled crime and the risks of weak operational security. 4. Parameter researchers found that a malicious ChatGPT shared link could execute code within a logged-in user’s session, exposing private conversations and enabling account actions. OpenAI patched the issue within eight days, demonstrating the business impact of vulnerabilities that cross trusted application and browser boundaries. 5. TeamViewer fixed a high-severity flaw that allowed a compromised remote machine to crash the viewer and potentially execute code on the user’s system. Affecting versions before 15.83 across multiple platforms, the vulnerability made accepting a remote-support session an attack path; prompt updating is essential.