# Cognition outlines security steps after the Binance hack and Cursor extension compromise

> Original title: A Practical Guide to Security in November 2026

- Source: Cognition Blog (Devin, Windsurf)
- Published: 2026-11-03T17:00:00.000Z
- Bad Influence: https://badinfluence.news/items/d5jnichh8frqqc9vxi959x3r5
- Original: https://cognition.com/blog/practical-guide-to-security-november-2026

## Summary

Cognition says recent incidents, including a $6.34 billion Binance theft and a malicious Claude Code Cursor extension, relied on known attack paths. It recommends immediate steps such as phishing-resistant MFA, removing production secrets from developer machines, and setting a minimum package age of 7 days, with further steps due within 30 days.

## Why it matters

The guide groups recent incidents into concrete steps by urgency, showing which basic controls would have blocked the Binance and Cursor extension attack paths.