GoKawiil
Tech News
Over Halloween weekend, Grok Bot users found their weekly usage limits suddenly maxed out even without heavy overnight use, with some reporting jumps from 50% to 100% usage. Elon Musk confirmed on X that the change was deliberate, saying the cost of running Grok Bot was 'unsustainably high relative to revenue.' He has not detailed how usage limits will work going forward.
Anthropic's official Claude VS Code extension on Cursor's marketplace was replaced with a backdoored version, 2.1.313, that could have reached up to 5,000 users before being superseded by version 2.1.314 hours later. Researchers say the malicious version installed a persistent SSH backdoor across Windows, macOS and Linux systems, and neither Cursor nor Anthropic has explained how the attacker accessed Anthropic's official distribution account.
Cursor, the SpaceX-owned AI coding platform, found a backdoored version of Anthropic's Claude Code extension in its marketplace for about 11 hours on Thursday, downloaded by up to 5,000 users across Windows, macOS and Linux. Cursor temporarily closed the marketplace, said no other extensions were affected, and published remediation steps. Anthropic confirmed its own systems and official distribution channels were not compromised, saying an attacker used access to Cursor's marketplace to publish a tampered copy.
Security researchers identified a trojanized version of a Claude Code extension distributed for the Cursor IDE, putting developers who installed it at risk. The discovery coincided with a second, separate security issue affecting Cursor on the same day.
Security researchers discovered a fake extension on Cursor's marketplace designed to impersonate a Claude Code tool and give attackers persistent access to developers' computers. The extension was distributed through Cursor's official marketplace, exploiting trust in the platform to reach developers using AI coding assistants.
A tampered version of Anthropic's Claude Code VS Code extension, labeled version 2.1.313, was available on Cursor's extension marketplace for about 11 hours on October 29, reaching as many as 5,000 developers. Security researchers at Phorion and OpenSourceMalware found the attackers inserted malicious JavaScript into the extension's main file that ran automatically on load, without any user interaction with Claude Code.
Security firm Phorion identified that version 2.1.313 of the official Claude Code extension for VS Code, distributed via the Cursor Marketplace, contained a hidden SSH backdoor targeting macOS, Linux, and Windows systems. Cursor has since removed the affected release from its marketplace and pulled the corresponding NPM and VS Code packages from their registries.
Following OpenAI's September 3 release of GPT-6 Astra, Nvidia CEO Jensen Huang posted on X that 'AGI has arrived,' while also touting 400,000 GPUs coming online. OpenAI itself has not used the term AGI for Astra, instead describing it as an 'operator' system that browses, codes and runs multi-step tasks, citing strong scores on benchmarks like FrontierMath Tier 4 and ARC-AGI-3. An AI engineer writing for Entrepreneur notes that Astra and rival Claude Fable 5.1 post near-identical benchmark scores yet behave very differently in practice, a gap attributed to the surrounding 'harness' rather than the underlying model.
SpaceX posted Q3 revenue of $14.6 billion, up 161 percent year-over-year, with its newly reported Super Intelligence (SI) segment generating $7.6 billion, an 830 percent jump attributed to new cloud agreements, the Cursor acquisition, and Grok adoption. Its Connectivity unit, which includes Starlink and its 13.6 million subscribers, brought in $5.2 billion and $2.4 billion in operating income, while the core Space business earned $1.8 billion but posted a $7 million operating loss.
OpenCode, an open-source AI coding tool, disclosed a security breach affecting 1.4% of users of its OpenCode Console platform, where some store API keys for AI services. The company described it as a large-scale distillation attack and notified affected users by email, while developers reported unexpected charges on OpenAI, Anthropic and Google AI accounts, some exceeding $1,000. Anthropic and Google blocked exposed keys, OpenAI worked with OpenCode to restore access and refund credits, and OpenCode said refunds for unauthorized charges are underway.
A contributor opinion piece for Entrepreneur argues that founders outside AI are misreading their own growth as failure because they're comparing it to charts from companies like Lovable and Cursor, which hit $600 million and $4 billion annualized revenue run rates respectively in 2026. The piece attributes AI's unusual speed to frictionless sales cycles, minimal regulation and instant credit-card adoption, conditions most industries lack. It advises founders to study peers in their own category, track controllable short-term metrics, and identify specific milestones that could unlock faster growth.
A new email service called Clova.Email lets users claim an address prefix of five or more characters, after which only the first sender to email that address is ever accepted again. The app also offers an MCP integration so AI assistants like Claude or Cursor can be granted limited permissions to manage inbox tasks such as generating addresses or retrieving codes and receipts. Sign-in options include Google, passkeys, or username and password, with Google logins sharing only email, name and photo.