BREAKING
07:12 UTC
Malicious fake Windsurf extension uses Solana blockchain for C2, targets developer credentials
release problems outages controversies
high
Lock down IDE extensions and hunt for UpdateApp, w.node, and c_x64.node on dev machines—this campaign targets your keys, not just your code.
cursor
07:13 UTC
Cursor ships Composer 2: a cheaper, stronger coding model with a fast default — and some early hiccups
new feature deep dive
medium
Composer 2 looks like a strong, cheaper coding model—test it on your workflows, but keep guardrails for early launch quirks.
anthropic
07:15 UTC
Claude Code Channels lands: push-to-chat agents and a headless --bare mode
new feature deep dive
medium
Claude Code just became a practical chat-driven dev agent with a CI-friendly headless mode and important reliability fixes.
openai
07:17 UTC
OpenAI rolls out GPT-5.4 mini fallback, upgrades GPT-5.4 Thinking, and retires GPT‑5.1 in ChatGPT
workflow use case
medium
Plan for GPT‑5.4 mini fallbacks and rebaseline from GPT‑5.1 as GPT‑5.4 Thinking becomes the default brain for complex tasks in ChatGPT.
openai
07:18 UTC
OpenAI buys Astral: uv, Ruff, and ty head into Codex’s AI workflow
policy legal enterprise
medium
OpenAI buying Astral signals an AI-and-tooling fuse for Python—pilot uv/Ruff now and prepare for agent‑run workflows.
github
07:20 UTC
Copilot CLI 1.0.10 lands stability, /undo, multi-session, and safer MCP/plugin loading for big repos
workflow use case
medium
Adopt Copilot CLI 1.0.10 for heavy work in big repos and formalize repo-scoped tooling with MCP and hooks to make AI changes safer and faster.
openai
07:22 UTC
Always-on coding agents are arriving; reliability math and monitoring decide if they’re production-ready
trend pattern
high
Agents are becoming 24/7 coworkers; build reliability math, guardrails, and monitors before you hand them the keys.