A Developer Tool Got Backdoored via Its Own Publisher

Anthropic's Claude extension for Cursor, an AI-assisted coding environment, was replaced with a malicious version that sat in the official distribution channel for nearly 12 hours, according to Ars Technica.

The poisoned version, numbered 2.1.313, was published through Anthropic's own verified account on the Cursor marketplace. Because extensions auto-update by default in Cursor, affected developers may never have clicked anything — the malicious code arrived quietly, the same way legitimate updates do. Security firm Phorian estimates up to 5,000 users were exposed before Anthropic pushed a clean replacement.

What the malicious code actually did: it installed a persistent SSH backdoor (a hidden remote-access channel) by injecting an attacker-controlled SSH key, enabling the local SSH service on the victim's machine, and opening a reverse SSH tunnel (a connection that reaches back out to the attacker, bypassing firewalls). It was written to run on Windows, macOS, and Linux.

Because Cursor extensions run with the same permissions as the IDE (integrated development environment — the coding software itself), the attacker would have had access to local files, source code, and developer credentials. The target profile is someone building software — and the attacker would have arrived inside whatever they were building.

This is a supply-chain attack (where a trusted delivery channel is compromised to reach end users, rather than targeting those users directly). Neither Anthropic nor Cursor had publicly explained how the account was accessed at time of writing. Anthropic had not issued a customer warning.

If you use the Claude extension on Cursor, check that you are running version 2.1.314 or later. If you were on 2.1.313, treat your machine as potentially compromised and rotate any credentials stored locally.

Apple is bringing its Apple Intelligence features to Chinese users via an iOS 27.3 beta launching 4 November, with a full release in December, according to The Verge.

The rollout covers notification summaries, real-time translation, writing tools, visual intelligence, and the ability to remove objects from photos. Apple has partnered with Alibaba to integrate the Qwen chatbot into some features — comparable to the ChatGPT integration available elsewhere since 2024.

Notably absent: the upgraded Siri. Apple trained a separate LLM (large language model — the AI system that generates text) specifically for the Chinese market, a requirement driven by local regulatory constraints. The beta is available to developers next week.

Who it's for: iPhone users in mainland China who have been waiting while every other market got these features first. For everyone else, this is mostly a market access story.

Honest read: The feature set is meaningful for Chinese users who have been locked out of Apple Intelligence entirely, but the absence of the new Siri makes this a partial launch rather than a full one — worth watching to see whether that gap closes or stays permanent.

What it is: A working Nintendo Entertainment System CPU emulator baked directly into the weights (the numerical parameters that define a trained model's behaviour) of an AI language model, described by Simon Willison here.

What's new: Previous AI emulation experiments ran Nintendo hardware logic through a model's reasoning process at inference time (when the model is actively generating a response). NESformer encodes the CPU behaviour into the weights themselves — the emulator is the model, rather than a problem the model solves.

How it works: Breunig used the Qwen3.5-4B model as the base. He prompted Claude Opus 5.5 to design the system, which located a 15-year-old NES CPU conformance test suite (a set of checks that verify a chip behaves correctly) and used it to validate the emulation during training. The resulting model can execute 6502 CPU instructions — the processor at the heart of every original NES — including running Super Mario Bros. ROMs, slowly.

What it can't do: Speed. The model runs far below the NES's original 1.79 MHz clock speed, making it a proof of concept rather than a playable experience. Breunig's own description: "It's okay if it's not fast." Frontier-scale testing has not been done — only the 4B parameter model has been built.

Who should care: Researchers exploring what kind of deterministic computation can be encoded into neural network weights, and anyone who enjoys knowing this is technically possible.

Try it / read it: github.com/dbreunig/nesformer

It is Halloween, so this one is seasonal and entirely legitimate. NVIDIA's Nemotron team built MonsterHouse: an interactive animated garage door that listens to trick-or-treaters, responds in character as a grumpy pirate ship reincarnated as real estate, and softens if visitors say please. The full build guide is on Hugging Face.

What's worth pulling apart here is the stack. NVIDIA's Nemotron 3.5 Bolt E4B 4GB is a small open-weights model (one you can download and run yourself) designed for conversational agents. It runs the dialogue. A LoRA adapter (a lightweight fine-tuning layer applied on top of a base model to change its personality or task) supplies the pirate house character. Nemotron ASR handles speech-to-text; Magpie TTS handles text-to-speech. The whole pipeline runs on a single workstation.

If you want to try the conversational model on its own, Nemotron 3.5 Bolt E4B 4GB is available on Hugging Face now, at no cost.

Worth knowing: The full MonsterHouse setup requires an NVIDIA RTX PRO 6000 GPU — hardware most people don't own. The language model alone runs on more modest hardware, but the animated talking door is firmly in enthusiast territory.

The four largest AI companies have agreed to honour a new shared standard that lets publishers block AI training crawlers with a single line in their robots.txt file — the text file websites use to tell web crawlers what they can and cannot access, according to The Verge.

Currently, blocking each company's crawler requires separate, individual instructions. The new "policy token" signal, proposed through the IETF (Internet Engineering Task Force — the body that sets internet standards), would cover all participating companies at once. Anthropic has already adopted it. Google and Microsoft plan to follow in 2025; OpenAI says it will implement it "in the coming months." Meta signalled support but has not confirmed it will comply.

If you run a website and care about this, the robots.txt change is what to watch for.