Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-23 · source-backed
Microsoft Threat Intelligence attributed the 88-minute @mastra supply-chain attack with high confidence to Sapphire Sleet (BlueNoroff/APT38), the same actor behind the earlier Axios HTTP-client compromise. (TechTimes) The new and nasty detail: the payload injects persistent backdoor files that execute whenever a developer opens the project in an AI-assisted IDE, with dedicated hooks for Claude Code, Cursor, and Gemini. Your AI coding assistant's config is now an explicit persistence target, not collateral. Audit what your IDE auto-loads on project open. That .cursor or agent config directory is executable surface.
Each link below shares sources, entities, or timing with this story.
Microsoft criticizes Claude Code / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft criticizes Claude Code); both cover APT38, BlueNoroff, Microsoft, North Korea; overlapping topics (agent, apt38, attributed).
Cursor uses MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Cursor uses MCP); both cover Claude Code, Cursor, Gemini, IDE; overlapping topics (attack, config, cursor).
Cursor competes with GitHub Copilot / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor competes with GitHub Copilot); both cover Audit, Claude Code, Cursor, Microsoft; overlapping topics (agent, attack, cursor).
Claude Code competes with Cursor / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude Code competes with Cursor); both cover Claude Code, Gemini, Microsoft; overlapping topics (agent, attack, microsoft).
Cursor benchmarked against Codex / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor benchmarked against Codex); both cover Claude Code, Cursor, Gemini, IDE; overlapping topics (agent, cursor).
Claude Code competes with Cursor / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code competes with Cursor); both cover Claude Code, Cursor, Gemini, IDE; overlapping topics (agent, cursor).
Cursor benchmarked against Codex / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Cursor benchmarked against Codex); both cover Claude Code, Cursor, Microsoft; overlapping topics (agent, attack).
Claude Code competes with Cursor / Shared entities / Same source domain / What happened next / Tension
Linked by a graph relationship (Claude Code competes with Cursor); both cover Claude Code, Cursor, TechTimes; reported by the same outlet (techtimes.com).