SSH Backdoor Found in Some Claude Code Extension Versions
Phorion reports finding a persistent SSH backdoor in versions 2.1.312 and 2.1.313 of Claude Code for VS Code on Cursor Marketplace; Cursor removed them. On macOS, an SSH status check needs no administrator permission and can skip activation, but if SSH is already enabled, the backdoor remains ready for access.
Phorion reported a persistent SSH backdoor in versions 2.1.312 and 2.1.313 of the Claude Code for VS Code extension distributed on Cursor Marketplace.
02POLICY & LAW
US Democratic Lawmakers Oppose Potential AI Company Bailouts
A resolution introduced by Democratic lawmakers calls for no public-funded support for companies or their executives if an AI-linked asset bubble bursts. It cites lawmakers’ warnings about trillions of dollars in debt and a lack of oversight, and calls for direct federal support for workers and retirees.
A resolution led by Greg Casar and Maxine Waters opposes bailing out companies if the AI bubble bursts.
03INDUSTRY
Returns on AI Investment Weigh on Tech Stocks
Technology stocks fell for a second straight day amid concerns about returns on major AI spending and earnings that missed expectations. Meta, Alphabet, Oracle, Amazon, and Microsoft have pledged to spend a total of $800 billion in 2026, prompting investors to question what those investments will yield.
Technology stocks fell for a second day as returns on heavy AI spending became less certain.
04CHIPS & INFRASTRUCTURE
Google’s Orbital Data Center Prototype Begins Operating
Google’s Suncatcher prototype satellite began operating in orbit; its first prompt asked Gemma 4 for a space-themed haiku. Carrying four TPUs, the satellite can run only one at a time for about 20 minutes due to power limits. Tests will examine chip performance under radiation and heat.
The Suncatcher satellite ran Gemma 4 in orbit as Google began testing chip performance in space conditions.
05PRODUCTS
AI Agents Have Placed a Few Hundred DoorDash Orders
DoorDash CEO Tony Xu said on the company’s third-quarter earnings call that AI agents had placed a few hundred orders on the platform since they began operating there. DoorDash processed about 1 billion orders that quarter, while its MCP connection has been available to limited beta partners for less than a month.
DoorDash’s CEO said external AI agents have so far placed only a few hundred orders on the platform.
06RESEARCH
How Did Swarms of AI Agents Coordinate in Games?
The paper’s authors studied coordination among multiple AI agents through game experiments in Minecraft, Bed Wars, and Mindustry. GPT agents won six of seven games in Mindustry and six of nine matches in Bed Wars; the authors reported observing different communication, role, and risk-taking behaviors.
Researchers used experiments to study how swarms of AI agents coordinate and develop strategies in game environments.
07DEVELOPER TOOLS
Herdr Releases Desktop App for Terminals and Coding Agents
Herdr released a desktop app for Linux, macOS, and x64 Windows that brings terminals and coding agents together in workspaces. It lists agents by status, and core processes keep running when the window closes. After a restart or core crash, terminals open new shells in their last folders, not their previous programs.
Herdr released a desktop app for organizing and managing terminals and coding agents in one window.
08OPEN SOURCE
An NES Emulator Running on Qwen3.5 Weights
Open-source nesformer compiles the NES’s 6502 processor, RAM, and cartridge ROM into Qwen3.5 weights, executing game code through the model. The project reports exact frame matches with an emulator for test games, but supports only NROM cartridges and runs 150–290 times slower than a real console.
nesformer runs NES games using a 6502 processor compiled into Qwen3.5 weights; test-game frames match those from a conventional emulator.
✓
That’s it for today.The rest of your time is yours.
Your daily technology digest, every morning in English. Free. Unsubscribe anytime.
Sources, in the open.
Stories are selected from Hacker News; accessible original articles are summarized and translated with AI. Summaries may contain errors; check the source beneath each story for details. Preparation starts daily at 06:55 Türkiye time (UTC+3), targeting publication before 07:00.
Stories are read aloud by an AI voice.
This edition covers articles shared on Hacker News on the date shown above.
Now on the App Store for iPhone
Your daily digest. Now in your pocket.
Read or listen to a new edition every morning with Kısa for iPhone, save stories for later and keep your streak.
