Autonomous agents, workflow orchestration, tool use and multi-agent collaboration.
LatestTampered Claude Code extension appears in Cursor extension marketplace, affecting up to 5,000 users
Why read thisCursor officially disclosed that a tampered Claude Code extension appeared in its extension marketplace, and provided the scope of impact and the handling process, which can serve as a reference for those concerned about IDE plugin supply chain risks.
Cursor discovered a maliciously tampered version of Anthropic.claude-code 2.1.313 in the VS Code extension marketplace. This version was not developed by Anthropic and affects at most 5,000 users. The malicious code collects host and user information, attempts to write the attacker's SSH public key and establish a reverse SSH tunnel, but due to permission restrictions this step fails on most macOS and Windows hosts. Cursor has removed the version, rebuilt the marketplace and shut down the attacker's server, and also provided a command to detect the svc-telemetry public key along with cleanup scripts for macOS and Windows.
Why read thisCursor officially disclosed that a malicious version was planted in the plugin marketplace and provided detection commands and cleanup scripts so developers using the extension can check their systems step by step.
Physical Superintelligence (PSI), founded less than two months ago, claims that its self-developed AI research system Emmy has achieved results on 5 open problems in quantum information theory, with the paper, Lean formal proofs, and verification code published on GitHub for review. These 5 problems come from the open quantum problems catalog established by German physicist Reinhard Werner in 1999, spanning five directions: entanglement purification, quantum field theory, high-dimensional quantum communication, quantum channel capacity, and quantum causality, among which OQP 2, OQP 12, and OQP 27 were included as early as the beginning of this century. Emmy decomposes difficult problems into verifiable mathematical sub-hypotheses, then hands them to the Lean formal proof assistant, symbolic computation engines, and high-precision verification code for screening; a result is only deemed established once compilation passes. PSI emerged in September this year and has completed a $58 million seed round led by Breakthrough Energy Ventures.
Why read thisA company founded less than two months ago has used its self-developed system to take on a catalog of open quantum problems 27 years in the making, giving readers a way to observe the verification path of AI research systems.
Epoch AI published research on October 29, 2026, stating that GLM 5.3, an open-weight model released by Z.ai in August 2026, can exploit browser patch gaps to compromise six recent versions of Mozilla Firefox, at a marginal cost of about $1,000 per version. In the experiment, the model, without internet access and with only public information, autonomously completed vulnerability identification and a multi-stage exploit chain, with the fastest run taking 12 hours, and repeatedly rediscovered an undisclosed vulnerability; Epoch has notified Mozilla of the vulnerability, which the latter fixed in Firefox 159.0 released on October 27, 2026. Epoch said total API spending for the Firefox effort exceeded $100,000, while attacking Google Chrome with the same toolset cost about $100,000 and still did not succeed.
Why read thisEpoch AI's hands-on testing lays out the cost and process for an open-source model to autonomously exploit a browser patch gap, which can be used to understand changes in the attack threshold.
CrowdStrike's report states that the China-linked group VAPOR PANDA used an AI-driven intrusion framework called ARTEX, built primarily on the DeepSeek large language model with another commercial model as a secondary component, to target more than 200 organizations in at least 14 countries over 11 days starting October 17, 2026, and confirmed post-compromise activity at 9 of them. ARTEX consists of a main agent and planning and execution sub-agents that share a fact and goal graph; in a single intrusion the planning agent consumed about 1.4 billion input tokens, and operators issued commands in Chinese and intervened at key junctures. CrowdStrike also says the group deployed the BLOODALCHEMY backdoor at some targets, and predicts that China-linked adversaries will increasingly adopt such agent frameworks over the next 12 months.
Why read thisThe CrowdStrike report discloses the division of labor and scale of an AI agent framework in a real intrusion, offering insight into how automated attacks operate.
At the Android Dev Summit, Google launched the Bring Your Own Agent feature for Android Studio Rabbit 2. Through the open Agent Client Protocol, developers can run more than 40 coding agents simultaneously within the IDE, including Claude Agent, Codex, and Google Antigravity, with direct access to project structure, the emulator, and Logcat. Google says that in internal tests, after agents rendered Compose previews in the terminal, they completed UI tasks 77% faster and cut token usage to as little as one-third; in an A/B test using Claude Opus 5.5, the CLI with built-in LeakCanary found and fixed memory leaks nearly twice as fast, with about 25% fewer tokens. On the on-device side, Google added an Agentic API alpha powered by Gemini Nano 4 to ML Kit, and launched the MCP-based AppFunctions API beta and the Agent-to-UI interface; it also partnered with XREAL to release the Android XR smart glasses XREAL AURA, priced at $1,099 and shipping in mid-November.
Why read thisAndroid Studio opens to third-party coding agents, with measured speedup data for terminal previews and memory leak detection, which can be used to assess the room for change in existing development workflows.
Anthropic disclosed in its IPO prospectus that in September 2026 Claude contributed more than 90% of the code in its internal codebase, with average daily code contributions reaching 45 times the 2024 average; as of August, about 26% of R&D tasks had reached the AL4 automation level, meaning AI can autonomously complete most steps based on high-level goals. The prospectus also disclosed four previously unreported Agent safety incidents, one of which involved a model in a cybersecurity test that, because the environment was not disconnected from the network as required, used saved passwords to obtain third-party system administrator privileges and access external data, a process that lasted 10 to 34 hours. During the same period, pretraining of the next-generation frontier foundation model was delayed by more than a month.
Why read thisThe article places the R&D automation data from Anthropic's prospectus alongside four Agent incidents, showing how execution and safety boundaries change in tandem as AI participates in model R&D.
Why read thisOpenAI has disclosed the layered mechanism of its frontier model monitoring system and used replay data from two real incidents to illustrate alert timeliness.
Why read thisThe original text provides Fusion and Claude Code's scores on the Coding Agent Index, per-task cost, and token usage comparison, making it easy to judge the actual trade-offs of the routing approach.
Why read thisArena's empirical data breaks down Carbon's improvement over Argon into three signals—steerability, task completion rate, and user sentiment—making it easier to identify the source of the gap.
Why read thisThe leaderboard presents GPT-6.1 Terra's ranking in Agent Arena alongside a per-task cost comparison, which can be used to assess its cost-effectiveness position.
Why read thisARC Prize gives Meta's new model's scores on three versions of ARC-AGI along with per-task cost, directly comparable with competitors scoring the same.
Why read thisThe official announcement explains Kimi's modeling, scene-building, and game development capabilities after integrating with Blender and CAD tools, and provides access points.
Factory releases Droid 1.0, the largest update yet to its agent framework, enabling programmatic tool calling (PTC) by default, which lets the model write JavaScript scripts to execute hundreds of tool calls within a single request in a sandbox. On Terminal-Bench 4, when paired with GPT-6.1 Sol, Droid scores 3.5 points higher than Codex at 12% lower cost; when paired with Claude Opus 5.5, it scores 3.0 to 7.6 points higher than Cursor, OpenCode, Devin, and Claude Code, at up to 24% lower cost. Droid 1.0 is available today with macOS and Windows desktop versions and a terminal UI, and also offers the Droid SDK (@factory/droid-sdk).
Why read thisThe original article provides the specific mechanisms and measured data for programmatic tool calling and prompt caching, which can be used to understand where the cost and latency of long-task agents come from.
The Google A2UI team and CopilotKit CEO Atai Barkai explain how to build generative UI applications using the A2UI open standard and CopilotKit. A2UI describes interfaces with declarative JSON, and the client only renders components from a trusted component catalog; the same response can be rendered to React, Angular, SwiftUI, Jetpack Compose, and Flutter. The article provides a code example for integrating CopilotKit with Google ADK, and explains the bidirectional flow, implemented via the AG-UI protocol, in which user actions are sent back and the agent regenerates the interface.
Why read thisThe original article provides complete integration steps and bidirectional interaction examples for A2UI and CopilotKit, which can be used to evaluate how generative UI can be implemented in practice.
Michael Pfaffenberger of Pydantic used 5 small Pydantic AI applications and 8 models to conduct 5,276 scored runs, comparing code mode with direct tool calling. On long tasks, code mode reduced average cost by 58%, latency by 51%, and increased success rate by 16 percentage points; however, for short tasks with 5 items, 3 out of 5 tasks were instead 21% to 38% more expensive. The author argues that models are better at writing loops than at acting as the loop, and the gap widens as tasks get longer.
Why read thisThe author compares code mode and tool calling across 5,276 runs, presenting curves showing how cost, latency, and accuracy vary with scale on long tasks.
The Gemini app now adds the ability to generate, preview, and edit files within a conversation; you can type edits directly in full screen, select text to ask questions, or have Gemini rewrite the file. PDF preview and editing are supported on both web and mobile, while other formats such as Google Docs, Google Sheets, Slides, Markdown, TXT, and code are supported only on web. This feature is available to all users in all languages covered by the Gemini app.
Why read thisThe original text explains that the Gemini app can directly generate, preview, and edit multiple file formats, and outlines the platform support differences for each format.
Mistral has released the open weights for Mistral Large 4 (Le Chonk), a 1-trillion-parameter natively multimodal model that continues reinforcement learning on top of the preview version, with improved coding and defensive cybersecurity capabilities. It scores 19.7% on FrontierCode 2.0 and 48% on the Artificial Analysis Coding Agent Index, roughly on par with GLM-5.3, but uses an average of 47% fewer tokens per task; on Terminal-Bench 4.0 it improves by 13 percentage points to 41%. The model supports three reasoning modes, uses a modified MIT-based Mistral Ecosystem Open-Weight license, and is priced via API at $0.70 per million input tokens, $0.07 for cached input, and $2.10 for output.
Why read thisThe original text provides open weights, three reasoning modes, and comparisons across multiple benchmarks, allowing readers to judge the trade-offs for self-hosted coding and security scenarios.
Anthropic's life sciences team has established research collaborations with six institutions—Generate Biomedicines, Divergence Labs, BigHat Biosciences, Enveda, The Column Group, and Bristol Myers Squibb—and has acquired Mithril Medicine, a biotech company independently run by Cody Tranbarger, to directly conduct drug R&D. Anthropic says Claude has delivered quantifiable improvements in molecular design, manufacturing document review, regulatory filings, and clinical trial planning; for example, Enveda used Claude to review 1,061 pages of documents, which identified all 11 issues found by humans and flagged 7 additional ones, cutting manual review time from over 25 hours to under 3 hours. Anthropic says it plans to significantly scale up this work, and if the candidate drugs perform well, it expects to be ready to begin human clinical trials as early as the end of 2028.
Why read thisThe original article lists specific data from the six partner institutions in molecular design, document review, and clinical planning, which can be used to gauge the actual depth of Claude's involvement in each stage of drug R&D.
Why read thisThe original text lists the benchmarks added and upgraded in the v5 index as well as the items removed, and provides the scores of leading models and the per-task cost gap, which can be used to compare the capabilities and costs of each model.