Vercel Flags Cross Projects, but the Trust Boundary Gets Wider
Vercel projects can now evaluate one another’s feature flags without copying SDK keys between them.
-
-
Zest Moves Its Restaurant Picks Into a Text Thread, and Its AI Agent Can Book the Table
Restaurant discovery app Zest launched an AI concierge you reach by text. It suggests places based on where your card says you actually eat, and it can reserve through OpenTable, Resy and SevenRooms.
-
Update Firefox: An Open-Weight AI Model Turned Security Fixes Into Working Exploits
Epoch AI says the freely available GLM 5.3 model built working attacks on six recent Firefox releases for roughly $1,000 each by studying fixes that had not shipped yet. Mozilla has patched and is changing how it releases fixes.
-
The Browsers Inside AI Coding Tools Had Holes, and Two Are Still Open
Researchers found flaws in the built-in browsers of Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop. The Codex and VS Code issues were still unpatched at publication, so be careful what local files you open.
-
Governments Now Get 40% Off Claude With No Minimum Spend as the $1 Deal Ends
A new GSA agreement gives US government buyers 40% off Claude on a pay-for-what-you-use basis, with no minimum order. It replaces the $1-per-user promotion that runs out on October 31.
-
CrowdStrike: China-Linked Hackers Ran AI Agents on DeepSeek Against 200+ Organizations
CrowdStrike says a China-linked group used an AI agent framework running mostly on DeepSeek to target more than 200 organizations in 11 days. It confirmed follow-on hacking at nine of them.
-
Check Your Machine: A Fake Claude Code Extension Sat in Cursor’s Marketplace for About 11 Hours
Tampered builds of the Claude Code extension, versions 2.1.312 and 2.1.313, were served through Cursor’s marketplace on October 29 and tried to plant an SSH backdoor. If you use Cursor on a Mac or Windows PC, run Cursor’s quick check.
-
Claude’s $200 Max Plan Is Now Called Ultra, and Verified Accounts Lose the Five-Hour Cap
Anthropic renamed its top consumer Claude plan from Max 20x to Ultra at the same $200 monthly price. Verified accounts no longer hit a five-hour usage window, though a weekly limit still applies.
-
Apple makes EU tracking prompts less scary, but ATT survives
Apple is changing its App Tracking Transparency prompts in parts of Europe after competition regulators said the system favored Apple over third-party apps, giving developers more
-
GitHub Ported Copilot’s Agent Runtime to Rust, With Agents Doing the Heavy Lifting
A rewrite this size wasn’t affordable before agents. Here’s what porting the Copilot agent runtime to 800,000 lines of production Rust actually took. The post Migrating the GitHub
-
SageMaker ranks your GPU fallbacks
Amazon SageMaker AI now offers instance preference lists for training and processing jobs. Specify an ordered list of up to five instance types, and SageMaker AI automatically laun
-
Heart Models in Seconds: CHOP’s Open Source Cardiac AI Stack
Source notes a new development worth tracking. Read the primary link before you rearrange your stack.