سجل تدقيق مستقل يربط نتيجة البحث بالأدلة والتناقضات وحالة الالتزام والـReadback والمتابعة دون استنتاج حالة غير مسجلة.
Canonical Run ID
ACRIP-AIS-20261101T101040Z-CF2B1127
ناجح · PASS
What ran?GENERAL_DISCOVERY
Discover and rank the highest-value current AI Security delta using freshness + technical impact + evidence strength + real-world exploitation + defensive value; continue from persisted AIS state without duplicating existing topics.
CONCURRENCY_RECONCILIATION — Cursor incident selection was independently valid, but exact Topic identity had become canonical under CY-DOM-007 before closure. AIS duplicate research objects were mapped to aliases; one AIS follow-up watch retained.
EVIDENCE
الأدلة وما تثبته
3 سجل
AIS-E-CF2B1127-01
Cursor confirmed malicious versions under the legitimate extension identifier were served from its marketplace and attempted host reconnaissance, SSH-key installation, reverse tunneling and persistence; containment/remediation actions were published.
Does not prove successful remote access or credential theft on every exposed host; exact publishing root cause remains unknown.
Confidence
غير مسجل
Context
Cursor Marketplace / Claude Code-branded extension supply-chain compromise
Cursorفتح المصدرCY-T1 / Same-Authority Historical Version
AIS-E-CF2B1127-02
Microsoft independently confirmed the injected JavaScript chain and scoped the incident away from Microsoft Visual Studio Marketplace/npm; Anthropic confirmed its systems were not compromised.
SUPERSEDED
Supports
Independent technical mechanism confirmation, channel scoping and negative-space on execution success/secrets.
CONTRADICTIONS
التناقضات والقيود
لا توجد تناقضات مسجلة لهذه الجولة.
UNCERTAINTY
الفجوات غير المحسومة
{"Notes":"Do not infer Anthropic compromise.","Gap ID":"CY-GAP-SCSE-C7A29E4B-01","Impact":"Blocks precise root-cause/trust-control attribution.","Status":"OPEN","Gap Type":"PUBLISHING_PATH_ROOT_CAUSE","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-SCSE-C7A29E4B","Description":"Exact credential/account/workflow path allowing malicious builds into Cursor Marketplace is not publicly established.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101T100900Z-C7A29E4B","Required Evidence / Resolution":"Cursor RCA, marketplace audit/publisher logs and compromised-identity timeline."}
{"Notes":"Earlier ≤5,000 statement is exposure context only.","Gap ID":"CY-GAP-SCSE-C7A29E4B-02","Impact":"Blocks realized blast-radius/victim-count claims.","Status":"OPEN","Gap Type":"EXECUTION_REMOTE_ACCESS_DENOMINATOR","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-SCSE-C7A29E4B","Description":"No reliable public denominator separates install/update exposure, loader execution, persistence installation and successful remote SSH access.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101T100900Z-C7A29E4B","Required Evidence / Resolution":"Marketplace install telemetry plus endpoint execution/persistence/network/authentication evidence."}
FOLLOW-UP
المتابعات غير المحسومة
0 مفتوحة
لا توجد متابعة OPEN أو PLANNED لهذه الجولة.
AUDIT TIMELINE
السجل الزمني الكامل
0 حدث
لا توجد run_events تاريخية لهذه الجولة؛ تُعرض حالات Lifecycle أعلاه كما هي من سجل Run ولا يتم اختلاق أحداث بديلة.
Microsoft Security Researchفتح المصدرCY-T2 / Primary Independent Technical Research
AIS-E-CF2B1127-03
Sophos independently documented the malicious extension behavior and remediation need; its reported exposure estimate is retained only as exposure, while code errors are preserved as impact-limiting counterevidence.
SUPERSEDED
Supports
Operational corroboration and defender remediation priority.
Does not prove
Exposure estimate is not confirmed infection, successful remote access or credential-theft count.
{"Notes":"Server takedown constrains current access, not historical outcome.","Gap ID":"CY-GAP-SCSE-C7A29E4B-03","Impact":"Blocks post-exploitation outcome and attribution claims.","Status":"OPEN","Gap Type":"POST_COMPROMISE_ACTIVITY_ATTRIBUTION","Priority":"MEDIUM-HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-SCSE-C7A29E4B","Description":"Public evidence does not quantify interactive sessions, credential/session abuse, lateral movement or identify the actor.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101T100900Z-C7A29E4B","Required Evidence / Resolution":"Victim IR, authentication/network logs, cloud/source-control audit logs and authoritative attribution."}
ACTIVE — original SCSE finding unchanged. CY-DOM-006 independently rediscovered the exact incident and was semantic-deduped at closure; no duplicate evidence/confidence added. AIS added a cross-domain follow-up watch while root cause, realized remote-access denominator and actor/post-compromise outcomes remain gated.