Hey everyone! If you code with AI tools, this one is worth two minutes of your time. On Nov 13, Cursor published the results of its two-week investigation into the security incident from Oct 29, when a malicious copy of Anthropic's Claude Code extension showed up in Cursor's extension marketplace. What happened, according to Cursor: - It started at Fireworks, an AI vendor. An access key Cursor had issued to Fireworks was exposed, and the attacker used it to copy old coding agent traces (mostly from 2025, only from sessions not in Privacy Mode). - A few of those traces had unredacted credentials in them. The attacker used those to get into some of Cursor's SaaS tools and then planted the fake extension (versions 2.1.312 and 2.1.313). - The fake build was live for about 11 hours and reached at most 5,000 users. It tried to install a hidden SSH backdoor. - Anthropic didn't build or publish it, and it wasn't a flaw in Anthropic's product. Cursor says the incident is contained, the last attacker activity was Nov 1, and it has contacted every affected customer directly. - Cursor moved all inference off Fireworks, rotated its credentials, and rebuilt its extension marketplace. Why it matters: AI coding tools see your code, your terminal and often your API keys. One leaked key at a vendor turned into malware on developers' machines. If you installed either of those versions, Cursor says uninstalling alone may not be enough: follow its security notice and rotate your keys. Question: Do you ever paste API keys or passwords into an AI chat or coding agent? Has this changed how you'll handle them? Sources: - Cursor (Nov 13 update): https://cursor.com/blog/security-incident-update - Cursor security notice: https://cursor.com/blog/claude-code-extension-security-notice - BleepingComputer: https://www.bleepingcomputer.com/news/security/cursor-confirms-security-breach-led-to-malicious-claude-code-extension/

Hey everyone! Three days after Jensen Huang stepped down at Nvidia, a big chunk of the tech world is asking the board to undo it. A "Stand with Jensen" petition asks Nvidia's board to reinstate Huang while an independent investigation establishes the facts. Benzinga reports the site's counter passed 135,000 signatures early Sunday morning. What we know: - Elon Musk posted on X: "A petition is underway to reinstate Jensen and I'm signing it too." Replit CEO Amjad Masad, Epic Games CEO Tim Sweeney and Y Combinator CEO Garry Tan are also listed as supporters (TechCrunch). - The site says signers include thousands of current Nvidia employees and tens of thousands of shareholders, but those affiliations are self-reported and not verified. Business Insider spotted fake names on the list, and the organizers say they're removing them. - The campaign says it's independent, and that Nvidia and Huang don't endorse it. - Investors Brad Gerstner (Altimeter) and Gavin Baker (Atreides) sent the board a letter asking for a "slow, measured, and deliberate process" and to keep Huang's return on the table. - Meanwhile, CFO Colette Kress remains interim CEO, and TechCrunch reports Huang has agreed to testify before Congress. Why it matters: Nvidia's chips power almost every AI tool we use, and Huang personally drove a lot of its deals and startup investments. Whether he comes back, or the board holds firm, will shape how the most important company in AI is run for years. Question: Should a company bring a founder back because the public and investors demand it, or should the board stick to its decision until the investigation is done? Sources: - TechCrunch: https://techcrunch.com/2026/11/14/elon-musk-other-tech-execs-sign-petition-calling-on-nvidia-to-reinstate-jensen-huang/ - Benzinga: https://www.benzinga.com/markets/tech/26/11/63276610/nvidia-jensen-huang-reinstate-ceo-petition-elon-musk-investors

Hey everyone! AI is moving from your phone to your face. Google, Samsung, Warby Parker and Gentle Monster just opened preorders for "Intelligent Eyewear," glasses with Gemini built in. The details: - Warby Parker frames (Alden, Reid, Wren) start at $395. Gentle Monster frames run $449 to $489. - 30 designs in total, with prescription options for most frames. - Preorders opened Thursday (Nov 12). They ship and hit stores on December 10. - Gemini helps hands-free: real-time directions, live translation, and help with what you're looking at. You can also take photos, listen to music and manage your schedule without pulling out your phone. - They work with iPhone and Android, but only certain phones (for example Pixel 7 or newer, recent Galaxy S and Z models, and newer iPhones). Available in the US, and Gentle Monster also in South Korea. You need an 18+ Google account. - Google is leaning hard on privacy, saying the glasses are designed to be transparent to people around you. Why it matters: This puts Google head to head with Meta's smart glasses. When an AI assistant can see what you see and hear what you hear, a lot of "let me grab my phone" moments disappear. Think a contractor checking a part, a traveler reading a menu in another language, or a salesperson getting notes before a meeting. Question: Would you wear AI glasses every day? What's the first thing you'd use them for? Sources: - Google blog: https://blog.google/innovation-and-ai/technology/xr-ar/google-intelligent-eyewear-collections-pre-order/ - Samsung: https://news.samsung.com/us/samsung-announces-u-s-release-intelligent-eyewear-bringing-smart-way-world/ - Ars Technica: https://arstechnica.com/google/2026/11/google-pushes-privacy-angle-as-gemini-powered-smartglasses-debut-starting-at-395/

Hey everyone! AI agents just got a wallet. On Friday (Nov 13), OpenAI introduced ChatGPT Wallet, a way for its agents to actually check out and pay for things you ask them to buy. How it works: - You add a card once. Before every purchase you see the items, the total and the card, then approve it with a security check like Face ID or a fingerprint. - The agent never sees your real card number. The payment network creates a substitute "payment token" for each approved purchase. - You keep your card's normal rewards and protections for eligible disputes. - It's built with American Express, Mastercard and Visa. - For now it's rolling out only to ChatGPT Pro subscribers in the US (18+), through OpenAI's "dots" agents. OpenAI also says that over time it expects people to set spending limits, categories or time windows and let the agent buy within those rules. That part is a future plan, not something that ships today. Why it matters: Until now, AI could help you research and compare, but you still had to do the checkout. If agents can pay, they become real customers. For business owners, that's a big shift: OpenAI says websites need to make sure they aren't accidentally blocking agents. Soon some of your "customers" may be someone's AI shopping on their behalf. Question: Would you let an AI agent buy something for you if you had to approve every purchase? And if you run a business, are you ready for AI shoppers? Sources: - OpenAI: https://openai.com/index/introducing-chatgpt-wallet - Bloomberg Law: https://news.bloomberglaw.com/artificial-intelligence/openai-launches-chatgpt-wallet-for-agentic-payments

Hey everyone! The biggest name in AI hardware just changed hands, and it happened fast. Jensen Huang, who co-founded Nvidia and ran it for 33 years, has resigned as CEO, president and board member, effective immediately. Nvidia's board accepted his resignation on Wednesday (Nov 11) and announced it on Thursday (Nov 12). What we know: - CFO Colette Kress is now interim CEO, and she keeps her CFO job while the board searches for a permanent CEO (inside and outside candidates). - Harvey C. Jones, a board member since 1993, is Nvidia's first-ever Chair of the Board. - TechCrunch reports the resignation came days after Huang admitted to a romantic affair with an alleged Chinese spy. NPR reports Nvidia is running an internal investigation and Congress is preparing to look into the spy allegations. - The board says it expects operations, customer commitments and the product roadmap to continue without interruption. Why it matters: Almost every AI tool you use, from ChatGPT to Gemini to Claude, is trained and run on Nvidia chips. Huang was the face of that boom and personally handled a lot of the big deals. The chips aren't going anywhere, but leadership changes at the company at the center of AI can ripple into chip supply, prices, and the deals that fund new AI data centers. Question: Does one person at the top really matter this much to a company this big, or will Nvidia barely feel it? Sources: - Nvidia newsroom: https://nvidianews.nvidia.com/news/nvidia-announces-ceo-transition - SEC filing (8-K): https://www.sec.gov/Archives/edgar/data/1045810/000104581026000082/nvda-20261111.htm - TechCrunch: https://techcrunch.com/2026/11/12/nvidias-jensen-huang-resigns-chipmaker-names-cfo-colette-kress-as-interim-ceo/