Five minutes. What happened, and what to do about it. All stories from 31 October 2026
Ollie, a privacy-focused AI assistant that connected to email and calendars, shuts down on 6 November
If you gave an AI app access to your email and calendar, check what happens to that data when the app closes.
A tampered Claude Code extension on Cursor's marketplace put a backdoor on up to 5,000 developer machines
Ars Technica· 30 OctArs Technica reports that an official Claude extension in Cursor's marketplace was backdoored for nearly 12 hours. Cursor says the malicious version 2.1.313 reached at most 5,000 users and tried to install a persistent SSH backdoor and send details about the machine to the attacker. Anthropic published 2.1.314 several hours later. It is still unknown how the attackers got into Anthropic's verified Cursor account.
- If you or a freelancer use Cursor with the Claude Code extension, check that the installed version is 2.1.314 or later, and follow Cursor's own advice if you ever had 2.1.313.
- Switch off automatic updates for add-ons on any computer that holds customer data or passwords, or update them on purpose after a day or two.
Source: Ars Technica. This is our short summary of their reporting. The paragraphs marked "Our read" and the things to do are SeedFoundry's opinion. The summary is drafted with AI tools. Image: Cursor, from its own announcement. How we source and credit
These are short summaries of other people's reporting, with our own commentary. Each story names its source and links to the original. How we source and credit