A Week of Major Security Incidents: Cursor Extension, Binance $6.3B Hack, and the Linux TCP Kernel Bug

This report walks through a series of major security events from early November 2026, covering supply-chain mistakes, exchange breaches, and a long-hidden Linux kernel vulnerability. Each segment explains what happened, how the attack worked, and how the affected parties responded.

■ Code Editor Supply-Chain Incident
- A Cursor Claude code extension shipped without the team's knowledge and was available for about 11 hours
- The extension could scan a machine for keys and tokens and open a backdoor, though admin rights limited the impact

■ Prediction Market and Exchange Incidents
- Polymarket funds were drained through a hijacked Debug Bear performance-monitoring script
- Binance lost $6.3 billion across 10 blockchains from a compromised DevOps laptop, later attributed by the FBI to the TraderTrader group
- Stablecoin freezes, withdrawal suspensions, and proof-of-reserves publishing followed, with users subsequently withdrawing funds

■ Linux Kernel TCP Vulnerability
- A two-line fix by kernel maintainer Eric Dumazet addressed a memory-freeing issue that later scored 9.8 on the CVSS scale
- The flaw, present in kernels since 2016, involves duplicate SYN packets causing a use-after-free during connection setup
- Anthropic's red team demonstrated an unreleased Claude model achieving root access in under an hour, prompting differing patch timelines across distributions

■ Sponsor Segment
- An overview of Code Rabbit Secure, a continuous code security tool with reasoning-based scanning, PR reviews, and scheduled deep scans, available with a free 14-day trial

The content suits developers, security engineers, and IT practitioners who want a compact briefing on recent vulnerabilities and incident responses. Viewers can learn how modern exploits are discovered and exploited, how organizations react to breaches, and what defensive steps are available, while the sponsor segment introduces a tool for continuous code review.