Windsurf IDE

Malicious Windsurf IDE Extension Uses Solana Blockchain to Steal Developer Data

Windsurf Stealer Solana Blockchain Malware

Malicious Windsurf IDE Extension Uses Solana Blockchain to Steal Developer Data

Do Son March 22, 2026

Bitdefender uncovers a malicious Windsurf IDE extension using the Solana blockchain as an unblockable C2 to steal developer credentials and source code.

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-20051CVSS 7.4
A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
Watchtower Verified📅 Updated: Nov 1, 2026
CVE-2026-20118CVSS 6.8
A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
Watchtower Verified📅 Updated: Nov 1, 2026
CVE-2010-20125CVSS 8.7
DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
Watchtower Verified📅 Updated: Oct 30, 2026
CVE-2015-20130CVSS 5.1
Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
Watchtower Verified📅 Updated: Oct 30, 2026
CVE-2026-111357CVSS 7.0
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
CISA KEV📅 Added to KEV: Oct 30, 2026
CVE-2026-118527CVSS 4.3
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
CISA KEV📅 Added to KEV: Oct 30, 2026
CVE-2026-118539
This module enables you to sell goods and services to customers through an included shopping cart and checkout...
Admin intel📅 Updated: Oct 29, 2026
CVE-2022-31034CVSS 8.3
Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
Watchtower Verified📅 Updated: Oct 29, 2026

CVE-2026-83770CVSS 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
📅 Updated: Nov 2, 2026
CVE-2026-83780CVSS 9.8
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
📅 Updated: Nov 2, 2026
CVE-2026-116606CVSS 9.3
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
📅 Updated: Nov 2, 2026
CVE-2026-83782CVSS 9.8
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
📅 Updated: Nov 2, 2026
CVE-2026-19677CVSS 9.3
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to...
📅 Updated: Nov 2, 2026
CVE-2026-111594CVSS 9.2
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view...
📅 Updated: Nov 2, 2026
CVE-2026-120213CVSS 9.1
@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In...
📅 Updated: Nov 2, 2026
CVE-2026-102435CVSS 9.8
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to...
📅 Updated: Nov 2, 2026