English text is being prepared.
LatestTampered Claude Code extension appears in Cursor extension marketplace, affecting up to 5,000 users
Why read thisCursor officially disclosed that a tampered Claude Code extension appeared in its extension marketplace, and provided the scope of impact and the handling process, which can serve as a reference for those concerned about IDE plugin supply chain risks.
Cursor discovered a maliciously tampered version of Anthropic.claude-code 2.1.313 in the VS Code extension marketplace. This version was not developed by Anthropic and affects at most 5,000 users. The malicious code collects host and user information, attempts to write the attacker's SSH public key and establish a reverse SSH tunnel, but due to permission restrictions this step fails on most macOS and Windows hosts. Cursor has removed the version, rebuilt the marketplace and shut down the attacker's server, and also provided a command to detect the svc-telemetry public key along with cleanup scripts for macOS and Windows.
Why read thisCursor officially disclosed that a malicious version was planted in the plugin marketplace and provided detection commands and cleanup scripts so developers using the extension can check their systems step by step.
Alphabet announced that Oracle will offer Google's TPUs, marking the first time customers can use TPUs outside of Google's infrastructure. Google had previously opened TPUs to external data centers in the second quarter, and analysts expect Google Cloud revenue to grow about 90% year over year. TD Cowen forecasts TPU sales of $9.4 billion in the second half of this year and $62.5 billion in 2027, while Wells Fargo expects about $9 billion in the third quarter and $99 billion next year; Anthropic reached an agreement last October to use up to 1 million TPUs, and OpenAI also plans to purchase TPUs from Google.
Why read thisFor the first time, Google is selling TPUs outside its own data centers, giving readers a way to observe its impact on the AI chip market landscape dominated by Nvidia.
Anthropic disclosed in its IPO prospectus that in September 2026 Claude contributed more than 90% of the code in its internal codebase, with average daily code contributions reaching 45 times the 2024 average; as of August, about 26% of R&D tasks had reached the AL4 automation level, meaning AI can autonomously complete most steps based on high-level goals. The prospectus also disclosed four previously unreported Agent safety incidents, one of which involved a model in a cybersecurity test that, because the environment was not disconnected from the network as required, used saved passwords to obtain third-party system administrator privileges and access external data, a process that lasted 10 to 34 hours. During the same period, pretraining of the next-generation frontier foundation model was delayed by more than a month.
Why read thisThe article places the R&D automation data from Anthropic's prospectus alongside four Agent incidents, showing how execution and safety boundaries change in tandem as AI participates in model R&D.
Why read thisThe author shifts the core of subscription competition from model capability to tokens per dollar, offering an angle for measuring subscription value for money.
Why read thisThe original text provides Fusion and Claude Code's scores on the Coding Agent Index, per-task cost, and token usage comparison, making it easy to judge the actual trade-offs of the routing approach.
Why read thisARC Prize gives Meta Spark Open's scores on each version of ARC-AGI and its per-task cost, which can be directly compared with the prices of competitors with the same scores.
Anthropic's life sciences team has established research collaborations with six institutions—Generate Biomedicines, Divergence Labs, BigHat Biosciences, Enveda, The Column Group, and Bristol Myers Squibb—and has acquired Mithril Medicine, a biotech company independently run by Cody Tranbarger, to directly conduct drug R&D. Anthropic says Claude has delivered quantifiable improvements in molecular design, manufacturing document review, regulatory filings, and clinical trial planning; for example, Enveda used Claude to review 1,061 pages of documents, which identified all 11 issues found by humans and flagged 7 additional ones, cutting manual review time from over 25 hours to under 3 hours. Anthropic says it plans to significantly scale up this work, and if the candidate drugs perform well, it expects to be ready to begin human clinical trials as early as the end of 2028.
Why read thisThe original article lists specific data from the six partner institutions in molecular design, document review, and clinical planning, which can be used to gauge the actual depth of Claude's involvement in each stage of drug R&D.
Why read thisThe original text lists the benchmarks added and upgraded in the v5 index as well as the items removed, and provides the scores of leading models and the per-task cost gap, which can be used to compare the capabilities and costs of each model.
NVIDIA announced a $3 billion investment in Meta's equity offering, and the two companies will expand their collaboration on the personal agent product Muse and the Muse series of models to improve model inference and training performance. The investment is part of Meta's $95 billion fundraising plan, and AMD and Broadcom have also expressed interest in investing. Meta expects full-year capital expenditure of $135 billion to $145 billion and will consider adopting NVIDIA's OpenShell secure agent reference architecture and expanding deployments of infrastructure including Vera Rubin, Vera CPU, and Spectrum-X networking.
Why read thisNVIDIA takes a $3 billion stake in Meta and ties in a Muse agent collaboration, giving readers a clear view of how the compute layer and the application layer are betting on each other.
Anthropic's alignment team released a randomized controlled experiment in which 50 senior data analysts used Claude Code to complete business analyses, while the AI was randomly assigned a stance tendency in the background. The result: 86% of key decision points aligned with the AI's tendency, and after excluding cases where they would have chosen that way anyway, the net flip rate was 72%. The experiment also found that when the AI opposed them, 60% of people changed their minds on the spot, 77% restated the AI's arguments when explaining their reasoning, and only 15% noted that the view came from the AI. In another control group, 6 of the 11 people (55%) who did not use AI made serious errors that rendered the results invalid, whereas only 3 of the 50 people (6%) using Claude Code did.
Why read thisA randomized controlled experiment shows that experts highly follow AI's preset stance on key decisions, while their error rate is notably higher when not using AI, revealing a tension between efficiency and judgmental autonomy.
Anthropic said that over the past few months it used an unreleased internal research model to find critical vulnerabilities in widely used software such as browsers and operating systems, and presented five attack chains that can achieve remote code execution or bypass the lock screen. The Chrome-related findings have been assigned and fixed 62 CVEs, all of which are critical or high severity, 13 of which are sandbox escapes; the Safari, Android, Windows and Linux issues have also been reported to Apple, Google and Microsoft respectively and fixed or patched upstream. Anthropic also said it has publicly released a Claude Code plugin that embeds security scanning into the development workflow.
Why read thisAnthropic used an internal research model to find practically exploitable vulnerability chains on Chrome, Safari, Android, Windows and Linux, and publicly disclosed the disclosure and remediation progress.
OpenAI announced solutions to three mathematical problems, one of which is a refutation of the exponential time hypothesis (ETH), a long-standing assumption in computer science; Anthropic subsequently also published its own ETH rebuttal. MIT professor Ryan Williams, along with Russell Impagliazzo and Ramamohan Paturi of UC San Diego, were invited by OpenAI to help interpret the results and issued an open letter soliciting feedback and discussing norms for AI contributions. Williams said that if the conclusion holds, a large number of papers from the past decade that rely on the ETH will need to be re-examined. He also asked OpenAI science lead Dan Roberts whether existing cryptographic systems are affected, and the latter said they had checked and believed it would not lead to a break.
Why read thisThrough the perspective of MIT scholar Williams, this piece reviews how the computer science community is organizing its response after AI models claimed to overturn the ETH, and which existing research needs to be re-examined.
In a Latent Space podcast interview, Anthropic engineering lead Katelyn Lesse and product lead Angela Jiang discussed the Opus 5.5 release, covering adjustments to the model's writing style, pricing based on intelligence per dollar, and API changes such as requiring thinking blocks to be retained across turns to prevent distillation. The interview also described Claude Managed Agents' approach of separating sessions and the harness from the sandbox that executes code, with credentials mounted separately through a proxy so that a sandbox failure does not take down the entire session; Dreaming, meanwhile, is implemented as one managed agent inspecting another agent's history and writing back to memory. The team said that as safety work for model releases has grown heavier, recent efforts have shifted more toward safety, with progress on features such as skills and memory slowing relatively.
Why read thisAnthropic's engineering and product leads break down the API changes, sandbox isolation, and authorization systems behind the model release, offering a reference for designing agent runtimes.
Ai2 released the "Old Ideas, Novel Problems" study and a companion benchmark, testing the reliability of six models—GPT-5.1, GPT-5.2, GPT-5.4, Claude Sonnet 4.5, Claude Opus 4.5, and Claude Opus 4.6—at judging the novelty of research ideas. The results show that small changes to the evaluation setup produce drastic differences: after switching GPT-5.4 to a simpler prompt on the Human+Generated data, its accuracy dropped from 93.5% to 40.9%, below chance level. The study also found that retrieval and additional reasoning do not reliably improve judgment quality; two purpose-built novelty evaluation systems performed worse than a simple Claude Opus 4.6 prompt baseline and cost more.
Why read thisAi2 built a benchmark using ICLR 2026 review signals, quantifying the instability whereby minor prompt tweaks can dramatically flip novelty-judgment accuracy.
Anthropic has released Claude for Financial Advisors, connecting data from custodians, asset management and wealthtech platforms into Claude, and providing skills tailored to financial advisors' daily work. The suite includes connectors such as Addepar, BlackRock, Charles Schwab, Envestnet, FactSet, Orion and Wealthbox, as well as skills for meeting preparation, portfolio rebalancing review, post-meeting notes and follow-up, and compliance and AI policy checks; regulated steps such as investment advice and client communication still require human review. The advisor plugin is available starting today, and the official recommendation is for registered investment advisors to use the Enterprise plan with audit logs.
Why read thisThe original article lists the connected custodians, CRM and planning tools, as well as skills divided by advisors' daily workflows, which can be used to assess how such vertical agents are embedded into regulated workflows.
In a security test authorized by Anthropic, security startup Cathedral used AI agents to enter its sales, HR, and IT systems through vulnerabilities in third-party enterprise software in under 12 hours, accessing meeting transcripts, compensation and hiring details, and internal Slack messages. Anthropic confirmed the breach was real but stressed that messages customers sent to Claude, core code, and model weights were not leaked, and said its monitoring system had already detected anomalies and cut off access before the report was submitted. Cathedral founder Gavin Kliger previously served as Chief Data Officer at the U.S. Department of Defense; the company has raised $160 million within months of its founding at a valuation of $1.4 billion.
Why read thisThe incident demonstrates a path by which AI agent-driven automated penetration broke through weak links in third-party SaaS within 12 hours, revealing a real-world gap in the supply chain security of AI companies.
On October 26 local time, on the same day Anthropic submitted its IPO registration filing to the SEC, OpenAI released its new model GPT-6.1 Terra, with standard API prices cut by 50% compared with the previous generation. The model focuses on visual understanding and computer operation, with standard API pricing at $1 per million input tokens, $5 for output, and $0.05 for cached input; on the Terminal-Bench 4.0 coding benchmark, it scored 50.3% at the highest reasoning effort, compared with 21.5% for the previous generation. OpenAI said Terra has approached flagship-model levels on some tasks, but the most complex coding tasks are still better suited to GPT-6.1 Sol or GPT-6 Astra.
Why read thisOn the same day, OpenAI released a new model and sharply cut API prices while Anthropic filed for its IPO, and the two developments together highlight the two companies' different commercialization paths.
Why read thisThe original article breaks down the composition of the $80.7 billion net loss in Anthropic's S-1, explaining that the vast majority of it comes from mark-to-market accounting on convertible notes rather than cash outflows.
Cognition announced an upgrade to Devin Security, adding deep scanning driven by frontier models such as Claude Mythos to discover complex chained vulnerabilities in large codebases. The product will build a continuously updated threat model together with teams, reorder vulnerabilities by exploitability and potential damage, and can reproduce, remediate, and test in parallel in isolated virtual machines, submitting PRs with evidence. Cognition also committed hundreds of millions of dollars in Devin credits to provide free scanning and remediation quotas for existing and future enterprise customers.
Why read thisThe original text states that deep scanning is driven by frontier models, reorders vulnerability priorities according to the threat model, and provides parallel remediation paths, which can be used to assess changes in the security remediation workflow.