Top story
Cursor removes a backdoored Claude Code extension from its marketplace
Cursor says a malicious Claude Code extension, version 2.1.313, affected at most 5,000 users on October 29. OpenSourceMalware independently inspected the injected SSH-backdoor code; the malicious package was distributed through Cursor's marketplace. Cursor removed the package and says the attacker's server is offline, though SSH activation failed on most macOS and Windows hosts without administrator rights.
ThereforeAffected developers need to remove persistent files and unauthorized SSH keys and rotate credentials; uninstalling the extension alone may not clean the host.
Cursor security notice · OpenSourceMalware analysis · The Hacker NewsCopy link to: Cursor removes a backdoored Claude Code extension from its marketplace
Also
CrowdStrike says VAPOR PANDA used AI agents against more than 200 organizations
Its October 29 investigation identifies nine confirmed compromises during an 11-day campaign using ARTEX and DeepSeek, separate from the previously covered Storm-0940 campaign.
ThereforeCrowdStrike says the agents let a small team pursue more targets at once than manual operations would support.
CrowdStrike investigationCopy link to: CrowdStrike says VAPOR PANDA used AI agents against more than 200 organizations
Microsoft prices $25 billion in debt
The offering is expected to close November 4; proceeds are for general corporate purposes, including possible capital spending, while CNBC reports a $170 billion 2026 capex target.
ThereforeBorrowing would supplement Microsoft's cash generation as it expands capacity for AI customers.
Microsoft announcement · CNBCCopy link to: Microsoft prices $25 billion in debt
Follow-up to Oct 29: Alphabet closes nearly 13% lower, losing roughly $500 billion
CNBC reports Alphabet maintained its $195 billion to $205 billion annual capital spending plan after reporting negative free cash flow of $9.07 billion for the third quarter.
CNBCCopy link to: Follow-up to Oct 29: Alphabet closes nearly 13% lower, losing roughly $500 billion
ServiceNow shares fall 27% as earnings revive AI disruption fears
CNBC reports the stock's worst day on record despite a slightly higher subscription-revenue outlook and 65% growth in net new AI average contract value.
ThereforeCiti's Tyler Radke says investors must wait longer for returns from engineers embedded with customers to build AI solutions.
CNBCCopy link to: ServiceNow shares fall 27% as earnings revive AI disruption fears
Wikimedia asks court to distinguish AI training from copied answers
Its October 30 amicus brief argues transformative model training can qualify as fair use, while copied content delivered through grounding techniques should respect licensing terms.
ThereforeUnder its proposed distinction, chatbots reproducing Wikipedia content would need to credit contributors and keep adaptations under the same license.
Wikimedia Foundation announcement · The VergeCopy link to: Wikimedia asks court to distinguish AI training from copied answers
Nvidia discusses billions in Nscale credit guarantees, The Information reports
Reuters, citing The Information, says talks concern power infrastructure and construction for Nscale's West Virginia campus; no agreement is signed and terms may change.
ThereforeThe proposed guarantees would support debt financing for a campus Anthropic plans to use.
ReutersCopy link to: Nvidia discusses billions in Nscale credit guarantees, The Information reports
AM Intelligence seeks up to $3 billion in debt, Bloomberg reports
CNBC, citing Bloomberg, says the Indian AI infrastructure company is considering bonds and bank loans for Nvidia's next-generation chips.
ThereforeThe funding would help finance AM Intelligence's planned expansion of rentable AI computing capacity.
CNBCCopy link to: AM Intelligence seeks up to $3 billion in debt, Bloomberg reports