A fake Claude Code 2.1.313 extension in Cursor's marketplace tried to install an SSH backdoor
Cursor says a malicious Claude Code 2.1.313 was live on October 29 and reached at most 5,000 users. Search for the svc-telemetry key to check.
Shared Copilot Automations run as Copilot and bill the repository owner, not the person who built them
GitHub's shared Copilot Automations are visible to anyone with repository read access, editable with write access, and billed to the repo owner.
GitHub Copilot's assisted permissions let a model approve the commands, file access and URLs it judges safe
GitHub Copilot's assisted permissions are generally available. A model screens each request and runs the clearly safe ones without asking you.
Anthropic open-sources srt, a sandbox that can lock down MCP servers and other agent tools
Anthropic's open-source srt tool blocks network and file writes for any command or MCP server. It is a research preview, and Windows is alpha.
Codex 0.164.0 adds saved prompt presets and masks credentials in remote commands
Codex 0.164.0 adds ten /presets slots, inline /model and /permissions arguments, and credential masking for supported remote Bash commands.
Issue 16: Python tools need security updates, Replit adds optional auto-publishing
Python tools need separate updates after the eMudhra incident. Replit adds optional automatic publishing, and Vercel budgets can pause live apps.
OpenCode ends session sharing, and existing share links stop working
OpenCode 1.19.1 discontinued session sharing. Old share links and sharing commands no longer work, and sessions can't be imported from share URLs.
Issue 15: Gemini 4 Argon's API price doubles after November 30
Gemini 4 Argon's API price doubles after November 30, and Copilot retires three models on November 16. Cursor's Grok plan bills other models extra.
GitHub Copilot retires Claude Opus 5, Opus 4.8 and GPT-5.6 Terra on November 16
GitHub Copilot removes Claude Opus 5, Opus 4.8 and GPT-5.6 Terra on November 16. Annual individual plans keep Opus 4.8; others should switch.
Copilot adds HydraFusion Max and increases reasoning effort for review
Copilot's HydraFusion adds a Max option and deeper review. Each model pass is billed, and discarded drafts can leave file edits behind.
Claude Code now summarizes long conversations you leave idle for about 54 minutes
Claude Code 2.1.299 compacts a 200K+ token terminal conversation after about 54 idle minutes. You can raise the threshold or turn it off.
Cursor joins the X Subscription with shared Grok usage
Cursor joins xAI's X Subscription. Grok usage shares one weekly pool across apps; other models in Cursor cost extra at provider rates.
Issue 14: Broken Claude Code Hooks Can Stop Work, Vercel Sets a Rollback Deadline
Claude Code hooks can block on failure when configured. Vercel Pro teams must opt out before October 23 to keep older deployments.
Claude Code can block tool calls when a guardrail hook fails
Claude Code 2.1.295 adds onFailure "block" for command and HTTP hooks. Before-action hooks can stop tool calls when a check fails.
Cursor's iOS app can message local agents while your computer stays awake
Cursor's iOS app can now see and reply to local agents on your computer. It is on by default outside Enterprise, and your machine has to stay awake.
Claude Code keeps local session transcripts for 30 days by default
Claude Code’s cleanupPeriodDays setting controls transcript retention, and longer retention leaves plaintext session history on disk.
Issue 13: Agent access expands from code to desktops and databases
Claude Code mods can change permission handling. Supabase adds agent confirmations, and Lovable's security fix depends on where your app runs.
Claude Code mods run unsandboxed and can alter permission checks
Claude Code mods run with access to your machine, so an installed plugin can change the safety and permission checks you rely on.
Codex Pro 200 reopens with lower usage; eligible subscribers keep their allowance until October 29
New Pro 200 subscriptions have lower included usage. Eligible existing subscribers keep their previous allowance through October 29.
Issue 12: GPT-6 and Opus 5.5 Cost Less as Agent Controls Tighten
OpenAI lowered GPT-6 API rates, Anthropic estimates lower Opus 5.5 costs, and GitHub and Cursor added new controls to coding-agent workflows.
Claude Code Adds a Saved Limit Reset Alongside Cloud-Session Credits
Opus 5.5 increased usage limits and added a reset users can activate. The launch cloud-credit offer had an October 7 claim deadline.
Copilot app sandboxing limits local access when enabled
GitHub's Copilot app can sandbox local sessions by project to limit file, network, and credential access, but the setting is off by default.
Cursor Adds Rollouts and Security Reviewer for Teams and Enterprise
Cursor's new Rollouts and Security Reviewer bots watch deploys and scan pull requests for vulnerabilities. Only Teams and Enterprise plans get them today.
GitHub Copilot adds automatic approvals for low-risk actions in JetBrains
Copilot adds automatic approvals for low-risk actions in JetBrains. Check the approval setting and action history before enabling the preview.