Cognition outlines security steps after the Binance hack and Cursor extension compromise
AICognition says recent incidents, including a $6.34 billion Binance theft and a malicious Claude Code Cursor extension, relied on known attack paths. It recommends immediate steps such as phishing-resistant MFA, removing production secrets from developer machines, and setting a minimum package age of 7 days, with further steps due within 30 days.
AIWhy it matters.
The guide groups recent incidents into concrete steps by urgency, showing which basic controls would have blocked the Binance and Cursor extension attack paths.
Source details
Cognition Blog (Devin, Windsurf) · cognition.comPublished · added here
Original title: A Practical Guide to Security in November 2026