A soft cyan and gold glowing package floats on a dark navy background with a magenta keyhole of light revealing a doorway inside.

Tools

A hijacked Claude extension on Cursor's marketplace shipped an SSH backdoor for 12 hours

Per Ars Technica, version 2.1.313 from Anthropic's official account was backdoored for nearly 12 hours. Anthropic had not issued a public notice.

Why it matters: If you run Cursor, check for 2.1.313 and audit authorized_keys, LaunchAgents and scheduled tasks. The payload inventoried environment variable names to find cloud keys, so rotate what was exposed.

November 2, 2026 · Ars Technica ·

Signal

Stories that change something.

Noise

Hype we checked so you don't have to. How we judge

  1. Overhyped

    AI agents are taking over shopping? At DoorDash they placed a few hundred orders, total

    What we checked: Ars Technica quotes DoorDash CEO Tony Xu on the Q3 earnings call saying agents generated several hundred orders and calling it a very low use case, next to just under 1 billion quarterly orders. The MCP connector is under a month old and limited to early beta partners.
  2. Misleading

    Thousands of AI ghost students stole millions? DOJ has charged five people so far

    What we checked: Ars Technica reports the DOJ charged five individuals, identified more than $32 million in actual loss, and said total losses come close to $130 million only if all flagged accounts are ghost students. The DOJ says the scheme relies partly on AI and has run since at least 2021.
  3. Overhyped

    Google's data center in space works? So far its orbiting TPUs have written one haiku

    What we checked: The Verge, citing Google's blog post, reports the TPUs booted and the on board Gemma 4 model produced a haiku, and quotes Google saying thermal stress and radiation tests are still to come, with twin interconnected satellites as the 2027 milestone.
  4. Unverified

    AI is driving a magnetic tape boom? That is Fujifilm's explanation for its own expansion

    What we checked: Ars Technica reports Fujifilm's announcement of a roughly 10 billion yen investment for 5x capacity versus fiscal 2025, with generative AI named by Fujifilm itself as the demand driver. It also credits air gapped backups against ransomware, and gives no independent demand figures.

Latest

  1. · TOOLS

    InfoQ makes the case for a context engine as the core of agent architecture
  2. · RESEARCH

    MIT Technology Review argues Berners-Lee's semantic web is arriving through agents
  3. · MODELS

    Apple Intelligence finally reaches China with iOS 27.3
  4. · CHIPS

    Altman says RAM belongs in data centers, not on your desk, amid a memory crunch
  5. · POLICY

    Dartmouth's provost warned about AI cheating, then lost his job over his own AI use
  6. · POLICY

    Pope Leo calls for AI to be disarmed, saying machines are tools, not persons
  7. · POLICY

    Data center backlash has become a deciding issue in Maine's Senate race
  8. · RESEARCH

    DeepMind and the UK government work on cutting planning application review times

The Heresy Brief

Signal only. One email, weekday mornings.