iCreatAI News
Back to main site
Skip to content
Only First party#Industry news
  1. Cursor Blog64

    An update on our recent security incident

    Cursor detailed a security incident that began when an attacker obtained an access key Cursor had issued to Fireworks, which Fireworks exposed, and used it to copy limited coding agent traces from a read-only storage bucket, with under 0.01% of customers having API credentials exposed. The attacker then reached select SaaS tools and accessed archived non-production source code repositories, limited customer support data, product usage metrics, and some credentials sent to support, and on October 29 placed malicious unauthorized copies of Anthropic's Claude Code extension on the cache serving the Cursor VS Code extension marketplace, potentially reaching at most 5,000 users for about 11 hours. Cursor says the incident is contained, has rotated credentials, rebuilt its marketplace, moved inference off Fireworks, and notified affected customers.

    Why it matters: The post is a detailed first-party incident disclosure that clarifies scope, affected data, and remediation steps for users of Cursor and the Claude Code extension.

  2. Cloudflare Blog66

    Adapting to AI penetration testing orchestrators: The Modern Security Model

    Cloudflare reports that since the original ARTEX agentic pentesting framework was taken down on October 8, over 12,000 repositories and 50+ framework families have emerged, with daily requests for AI pentesting tools up 30x since October 1 and ARTEX and its forks making up over 60% of known orchestrators as of November 12. Cloudforce One observed incidents where stolen static CI/CD tokens were chained with these frameworks, including ARTEX creating artex-* Worker scripts and generating over 69 requests per minute and 400 database dump requests in an hour. The post recommends a six-pillar "Modern Security Model" covering WAF and traffic control, anomaly detection, Bot Defense, Identity-Gated Access and micro-segmentation, schema validation and mTLS, and threat intelligence.

    Why it matters: Offers a data-backed view of how quickly autonomous LLM pentesting frameworks are proliferating and a concrete defensive framework for security teams.

  1. NVIDIA Newsroom93

    NVIDIA Announces CEO Transition

    NVIDIA's board announced that Jensen Huang has resigned as President, CEO and board member effective immediately, with EVP and CFO Colette Kress serving as Interim CEO while continuing as CFO until a permanent successor is named. The board appointed Harvey C. Jones, former CEO and Executive Chairman of Synopsys, as its first-ever Chair of the Board, and said it has full confidence in Kress and the leadership team. NVIDIA said it will report third-quarter fiscal 2027 financial results on Tuesday, November 17 at approximately 1:20 p.m. PT as previously scheduled.

    Why it matters: The announcement marks a leadership change at one of the world's most consequential technology companies, making it relevant to anyone tracking AI and semiconductor industry governance.

  2. ElevenLabs Blog60

    ElevenLabs and NVIDIA expand collaboration to bring voice agents to enterprises and governments globally

    ElevenLabs and NVIDIA are expanding their partnership across models, infrastructure and sovereign deployments, with NVIDIA Nemotron 3.5 Super VL now available in ElevenAgents and ElevenLabs adding 15MW of NVIDIA Blackwell Ultra and Vera Rubin compute. ElevenLabs models and NVIDIA infrastructure power a sovereign voice agent for Poland's national e-Health appointment system, and the companies are exploring on-device voice AI for robotics and physical AI.

    Why it matters: It shows how voice-agent stacks are being bundled with model and compute partnerships, and includes a concrete sovereign healthcare deployment with stated operational details.

  1. Anthropic News82

    Anthropic launches roadshow for proposed initial public offering

    Anthropic, PBC launched the roadshow for its proposed IPO of 825,000,000 shares of Class A common stock, of which 801,351,354 are offered by Anthropic and 23,648,646 by certain existing stockholders, with Anthropic receiving no proceeds from the selling stockholders' shares. The expected price range is $70.00 to $78.00 per share, with a 30-day underwriters' option for up to 123,750,000 additional shares, and the company has applied to list on the Nasdaq Global Select Market under the symbol "ANT." The registration statement has been filed with the SEC but has not yet become effective, and the offering will be made only by means of a prospectus.

    Why it matters: The filing details the size, price range and listing plan of Anthropic's proposed IPO, offering a concrete reference point for tracking the company's move into public markets.

  1. OpenAI News76

    A thousand fewer paths to root

    OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.

    Why it matters: It offers a concrete data point on autonomous vulnerability discovery and patching at scale in a critical open-source codebase.

  1. OpenAI News72

    OpenAI to acquire Pierre Computer Company, Inc.

    OpenAI will acquire Pierre Computer Company, expanding Codex's tools for building, understanding, and reviewing code.

    Why it matters: A brief acquisition announcement that signals how OpenAI plans to extend Codex's code-building and review capabilities.

  1. Wiz Research78

    “Black October” for AI Developer Platforms

    At least nine AI developer platforms disclosed incidents during October, with Fireworks, OpenCode and Warp reporting indications of an “agent swarm” attack and OpenCode and CommandCode attributing theirs to attempted “distillation.” Wiz describes downstream abuse of enterprise credentials tied to one vendor breach, including two keys used for roughly 800k and 1.7 million Bedrock calls respectively, likely over $100k in usage at list price. Wiz also links the keys to resale operations at llm-routing.com and xingjiabiapi.org, and publishes IOCs including 23.106.46.239 and 38.246.114.118.

    Why it matters: Provides Wiz's technical account of LLMJacking follow-on activity and IOCs from the October platform breaches.

  2. Cloudflare Blog78

    4 real? Tracking exploitation and patching of eMudhra’s weak keys

    Cloudflare reports that eMudhra's eight weak intermediate keys (derived from numbers like 4, 56, 66, 115, 155, 156, 230 and 237) could be recovered by anyone from public certificates, and that it patched all high-priority systems after learning of the issue on October 19, 2026. Logging on Pingora recorded about 22,000 attempted handshakes with the weak keys over a week, two-thirds of them fetches of test sites, with roughly 160 presenting forged certificates naming unrelated domains, one dated October 20 at 18:19 UTC, less than an hour after Mozilla's bug report became public. Probe data from 50 million challenge-page connections shows modern browsers mostly patched while bots and embedded browsers such as Android WebView lag, with more than half of probes on large networks still accepting the compromised chain.

    Why it matters: Documents real-world exploitation evidence and patching progress for a CA key compromise, with concrete data on forged certificates and client-side trust.

  1. Cursor Blog82

    Security notice — malicious version of Anthropic.claude-code (2.1.313) identified in the Cursor Extension Marketplace

    Cursor reported that a maliciously modified Anthropic.claude-code version 2.1.313 was available in its VS Code extension Marketplace between about 2:27am and 1:35pm PT, affecting at most 5,000 users; the extension attempted to install a persistent SSH backdoor, though the attacker server has since been taken offline. Cursor removed the version, shut down and rebuilt the marketplace, rotated keys, and published indicators of compromise plus macOS and Windows check and remediation scripts. Users who installed the version in that window should check for the svc-telemetry SSH key, remove persistence and tunnel processes, and rotate credentials from a trusted system.

    Why it matters: The notice gives concrete indicators of compromise and remediation steps that Claude Code users can act on directly.

  1. NVIDIA Newsroom75

    NVIDIA and Meta to Expand Collaboration on Muse and Muse Family of Models Amid Robust Growth

    NVIDIA and Meta announced they will expand their partnership on Muse and the Muse family of models to improve inference and training performance, citing popular demand for AI agents. Meta intends to expand deployment of NVIDIA Vera Rubin and Vera CPUs, plus Spectrum-X Ethernet networking and BlueField-4, and the companies will consider collaboration on NVIDIA OpenShell Reference Architecture and NVIDIA Sentry for agent security and monitoring. NVIDIA will invest $3 billion in Meta's equity offering.

    Why it matters: The announcement details a major AI infrastructure partnership and a $3 billion equity investment, useful for readers tracking NVIDIA-Meta ties and agent infrastructure.

  2. Cloudflare Blog74

    Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

    Cloudflare reports that from August 27 to September 9, 2026, 155 responses from the GLM-5.3 Workers AI model (@cf/zai-org/glm-5.3) to prompts longer than 681,280 tokens contained data from other customers' requests, caused by a prefill KV pool smaller than the 1,048,576-token context window combined with an SGLang bug that let rejected over-length requests proceed through disaggregated prefill/decode handoff. The model was taken offline on September 9 and restored the same day after a corrected configuration and an engine patch, and Cloudflare says it found no evidence of deliberate exploitation. Cloudflare recommends operators of disaggregated SGLang upgrade to v0.5.22 or later and verify KV pool size against context length on every node.

    Why it matters: A detailed first-party incident report that is useful for anyone operating disaggregated LLM inference, with concrete configuration checks and upstream patch references.

  1. Google Research62

    Bringing foundational models to the front lines of TB screening

    Google Research and Google for Health describe their path from a 2019 Radiology benchmark showing deep learning could match radiologists in detecting active pulmonary TB to prospective multi-site validation, CE MDR Class IIb certification via Nexus AI, and deployment in about 40 facilities across six countries, where over 90 clinicians have evaluated more than 25,000 chest radiographs. They also detail offline AI screening four kilometers underground at South Africa's Mponeng Gold Mine and open models (HAI-DEF, MedSigLIP, MedGemma, HeAR), including Indonesia's Ministry of Health fine-tuning MedGemma and MedSigLIP on domestic chest radiographs for a national TB program.

    Why it matters: It offers a concrete case study of moving medical AI from benchmark to certified, field-deployed tools, with named partners, regulatory milestones and deployment numbers.

  1. NVIDIA Blog72

    Google Cloud and NVIDIA Announce General Availability of NVIDIA Vera Rubin Infrastructure

    Google Cloud and NVIDIA announced general availability of NVIDIA Vera Rubin-based A5X instances next month, with planned expansion to Europe, combining Vera Rubin NVL72, ConnectX-9 SuperNICs, Google Cloud Virgo Network and fourth-generation liquid cooling for training, inference and large-scale reinforcement learning. Google Cloud plans to scale the infrastructure to as many as 960,000 Rubin GPUs across multiple sites, and Ineffable Intelligence, founded by AlphaGo creator David Silver, was the first customer to access A5X. Google Cloud also said it will be among the first cloud providers to offer NVIDIA Confidential Computing at rack scale on bare metal instances such as A4X Max powered by GB300 NVL72, and is making Confidential Computing generally available on G4 VMs powered by RTX PRO 6000 Blackwell Server Edition GPUs.

    Why it matters: The announcement details Google Cloud's Vera Rubin rollout plans, early customer use cases and confidential computing offerings, useful for readers tracking AI infrastructure availability.

  2. NVIDIA Blog62

    GTC Berlin 2026: Live Updates From NVIDIA CEO Jensen Huang’s Keynote

    At GTC Berlin, Jensen Huang said European companies including L'Oréal, Revolut, Spotify, Merck, Vodafone, Zara, Porsche, Nestlé and HSBC are working with NVIDIA on AI, following a weeklong European road trip in which the company committed nearly $10 billion to the region's technology ecosystem and worked with 12,000+ partners. He announced the NVIDIA DSX POD reference design for Vera Rubin AI factories in modular containers, claiming onsite deployment can shrink from six months to 14 days, along with the OpenShell Reference Architecture for safe AI agents, the Agent Knowledge Foundation, and Agile ONE SN, a 31-degree-of-freedom reference humanoid built on Isaac GR00T expected next year. He also described RTX Spark laptops with 1 petaflop of performance and 128GB of memory, and said Volkswagen, JLR, Volvo and Mercedes-Benz next-generation vehicles will be Hyperion-compatible.

    Why it matters: The piece is a detailed first-hand account of NVIDIA's European AI strategy and product announcements, useful for readers tracking agent infrastructure, AI factories and physical AI.

You have reached the end