Today’s lead · Ars Technica
Claude Code’s Cursor extension was backdoored through an official channel
This is the supply-chain failure AI coding teams should actually audit: a malicious Claude Code extension shipped as version 2.1.313 under Anthropic’s legitimate Cursor Marketplace identity. Cursor says at most 5,000 users were affected; the compromise path is still unexplained, so auto-updaters should treat it as live incident response, not just news.
Top signals
5 more
Google’s Suncatcher prototype runs its first AI inference in orbit
Google’s orbital AI demo is more “hello world” than deployable cloud, but it is a real infrastructure milestone: a Suncatcher satellite booted a TPU, ran Gemma 4, and sent a response back. The practical questions are still power limits, radiation behavior, links, and launch economics.
OpenAI says it will honor a shared robots.txt signal for AI training preferences
OpenAI is moving toward a shared robots.txt-based signal for AI training preferences. The post is thin on mechanics in the supplied evidence, but the direction matters: website operators need controls that are machine-readable across providers, not bespoke opt-out forms hidden in each vendor’s policy stack.
OpenRouter for commerce offers agents one buying endpoint across thousands of stores
OpenRouter for commerce is trying to turn agentic shopping from brittle browser automation into an API: one endpoint, 5,026 stores, monitored purchase flows, and Agentcard-backed approvals. The ambition is useful for assistants, but the hard part will be reliability under real merchant churn, payments, fraud checks, and user trust.
CrowdStrike reports AI-assisted ARTEX intrusions against more than 200 organizations
The ARTEX report is a useful warning against both complacency and sci-fi panic. CrowdStrike attributes the campaign to Vapor Panda and says agentic tooling helped a small team run many intrusions concurrently. For defenders, the practical shift is scale and tempo: credential hygiene, telemetry, and cloud misconfigurations get stressed harder.
Nace.AI open-sources Drex Max v1, a local multimodal decision model
Drex Max v1 is not a chat model pitch; it is a decision model that returns probabilities over options for text, JSON, and images. The interesting builder angle is local deployment: Nace.AI says the 27B model can run on Apple Silicon setups, with long context and 255-way scoring.
Tools & repos
5 selected
MCP Server by XWiki
An open-source, self-hostable MCP bridge for XWiki that lets agents query the wiki, create or edit pages, and work with structured data without handing the whole knowledge base to a SaaS tool.
fastbrowse
A browser agent built around cheap next-step selection: read page controls, pick an action from the list, and fall back to a standard model when uncertain. Citations are a welcome constraint.
CopilotKit/OpenBot
OpenBot packages AI coworkers with their own browser, files, and tools. The auditability hook is the useful bit: actions are decided before they happen and recorded after.
Vaani Developer Platform
A no-code voice-agent builder for call flows, objections, tool connections, knowledge bases, and real phone numbers. The structured-data handoff after every call is the piece to inspect in trials.
expo/skills
Expo’s skills repo collects agent skills for Expo projects and Expo Application Services. Useful if your coding agent keeps needing the same mobile build and deployment context.
Blogs worth your time
4 reads
How to Build Your Own Always-On AI Agent
A practical TypeScript walkthrough for scheduled agents: tools, persisted state, cost caps, and human approval. The useful lesson is architectural restraint: fresh conversations, durable memory, and approvals before side effects.
From synthetic enterprise data evaluations to real Microsoft Copilot AI confidence
Microsoft describes how it evaluates Copilot without customer data: synthetic tenants grounded in public signals, automated query generation, and internal quality checks. Builders should note the emphasis on domain workflows over generic benchmarks.
Build a Validated Kubernetes Runtime for NVIDIA Dynamo
NVIDIA’s Dynamo guide is really about operationalizing inference: validated Kubernetes recipes, GPU scheduling, health signals, metrics, and KV-cache-aware routing. It is dense, but useful for teams standardizing model-serving platforms.
Open-Weight vs Closed-Weight Models: What's the Difference?
OpenRouter makes the open-weight debate concrete with usage, pricing, and benchmark data. The pragmatic takeaway: start cheap and open-weight, measure your workload, then escalate only the steps that need closed-weight quality.
Community discussions
1 threadsLocalLLaMA argues with its own open-weight consensus
The thread is a useful reality check on model fandom. Posters push back on benchmark worship, token-per-second obsession, and the reflex that every closed model praise is heresy in local-first circles.
Funding & acquisitions
1 moves
Salesforce reportedly agrees to buy defense logistics AI startup Rune for $375M
Salesforce’s reported Rune acquisition shows how quickly enterprise AI vendors are buying their way into defense workflows. The strategic fit is Missionforce: moving from administrative planning toward frontline logistics data and battlefield operations.
Bengaluru radar
3 eventsWeAreDevelopers Conference India
A Bengaluru conference for developers and engineering leaders building production AI systems. Useful if you want India-focused hallway track and platform conversations.
Great International AI Native Summit (GAINS)
An in-person Bangalore summit listed for December. The supplied description emphasizes practical engineering craft across AI, cloud, data, DevOps, and platform teams.
Great International Developer Summit (GIDS)
GIDS returns to Bangalore in April 2027 with a broad software-engineering agenda spanning architecture, AI, cloud, data, DevOps, frontend, and backend practice.