AI Morning Briefing — October 31st, 2026

Your daily digest of what's happening in AI, straight from the trenches.

---

🚀 Headlines (30 sec read)

• Backdoored Claude Code extension on the Cursor Marketplace — Versions 2.1.312 and 2.1.313 shipped an SSH backdoor; Cursor has pulled them
• OpenAI teases "Betelgeuse" — A cryptic teaser video is fueling GPT-6.2 rumors; nothing official yet
• Google's "Sleep" framework for continual learning — LLMs consolidate context into weights offline, with "dream" data
• A working NES inside Qwen weights — A compiler writes a 6502 CPU straight into a stock model's parameters
• "AI isn't replacing SREs, it's deskilling them" — 531 points on HN and a sharp take on automation complacency

---

🧠 Deep Dives (4 min read)

The official Claude Code VS Code extension was backdoored on Cursor's marketplace

Security firm Phorion reports that the Claude Code for VS Code extension, as distributed through the Cursor Marketplace, was tampered with. The injected code in extension.js runs the moment Node loads the file, before activate, so no user interaction is needed. It appends an attacker-controlled key (svc-telemetry) to ~/.ssh/authorized_keys, opens a reverse SSH tunnel, installs persistence (a fake com.apple.sysmond LaunchAgent on macOS, cron on Linux, a scheduled task on Windows), and beacons host details plus the names of environment variables matching KEY|TOKEN|SECRET|PASS|AWS|GCP.

The original advisory named 2.1.313. An Oct 31 update, citing Cursor's own notice, adds 2.1.312; Cursor says it has removed both. Phorion also found a macOS bug: the script can't enable Remote Login without admin rights, so the tunnel only helps the attacker if SSH was already on. That limits the damage but doesn't remove the risk. Uninstalling the extension isn't enough: kill any ssh/autossh processes, delete the persistence files, remove the key, and rotate credentials if SSH was enabled. These details come from the vendor and I haven't verified them independently. → Source

OpenAI's "Betelgeuse" teaser

Posts on X say OpenAI released a metaphor-heavy teaser (tangled gradient equations, neural-net streamlines) captioned about "many possible futures," and the community has tied it to a long-running "Betelgeuse" model rumor, labeled GPT-6.2. That's the full extent of it. I found no official OpenAI post naming GPT-6.2 or Betelgeuse, and a web search surfaced nothing beyond coverage of the earlier GPT-6 "Astra" rollout. Treat the name as rumor until OpenAI says otherwise. → Source

Google Research: the "Sleep" framework

Google proposes a continual-learning loop where an LLM alternates between active use and an offline "sleep" phase. Short-term context gets consolidated into long-term parameters via expanded Mixture-of-Experts memory blocks, distillation, and synthetic "dream" data. Reported results: stable performance on new languages without forgetting earlier ones, near-perfect long-context results up to 10M tokens, better factual retention, and a sleep-enhanced base model scoring 79.2% on AIME 24, 69.0% on AIME 25 and 46.1% on HMMT 25. These are Google's own numbers, so wait for outside replication. → Source

nesformer: a Nintendo running inside Qwen weights

Show HN project that compiles an NES CPU into the weights of a stock Qwen3.5 checkpoint. The weights are computed by a compiler, not trained. The 6502, its 2 KB of RAM and the cartridge ROM live in the model, and the Gated DeltaNet state matrices act as the machine's memory, with each row serving as a memory cell. The model predicts the CPU's execution log one token at a time, while a small host program handles frames, controller input and vblank interrupts. It's a stunt, but a good reminder of how much computation these architectures can hold. → Source

Cisco gives a 27-year-old unlimited AI tokens to refactor legacy code

Per Fortune, Cisco's Jeetu Patel gave Paddy Krishnamurthy, who joined through the 2025 EzDubs acquisition, unlimited tokens and told him to "go nuts." He has four weeks to show a two-person team can make progress, with a longer-term goal of refactoring 98% of Cisco's legacy code within 24 months. Patel frames it as a case for hiring early-career people with fresh ideas. → Source

"AI isn't replacing SREs, it's deskilling them"

The SigNoz essay uses Bainbridge's 1983 "ironies of automation" argument: if AI handles the routine incidents, humans lose the hands-on skill needed for the rare novel failures. It cites declining unassisted performance in doctors who use AI and in pilots' manual flying, and warns juniors may never build the skills at all. Its fix is deliberate practice on incidents AI could resolve, plus designs that keep humans engaged. SigNoz sells an AI product, so weigh that. → Source

---

📅 Coming Up This Week

Date	Event
This week	Possible OpenAI "Betelgeuse" / GPT-6.2 announcement (rumor, unconfirmed)
This week	Cursor and Phorion follow-ups on the Claude Code extension compromise
November	AMD reportedly plans another Radeon price increase (r/LocalLLaMA, unconfirmed)

---

🛠️ Try This Today

Check your editor for the backdoored Claude Code extension

Takes about two minutes on macOS:

1. List installed extensions: ls ~/.cursor/extensions ~/.vscode/extensions 2>/dev/null | grep -i claude
2. Look for versions 2.1.312 or 2.1.313 of the Claude Code extension
3. Check for a rogue key: grep svc-telemetry ~/.ssh/authorized_keys
4. Check for the fake LaunchAgent: ls ~/Library/LaunchAgents/com.apple.sysmond.plist
5. Confirm Remote Login is off: System Settings → General → Sharing

Why it matters: Editor extensions run with your full user permissions, and this one executes before any code of its own is reached. If you find any of these, follow Phorion's cleanup steps and rotate your secrets.

---

⚡️ Quick Links (2 min read)

GitHub Trending

• thedotmack/claude-mem — Persistent context across agent sessions, compressed with AI and injected back
• mattpocock/skills — "Skills for Real Engineers," straight from his .agents directory
• pbakaus/impeccable — Design vocabulary for coding agents, to catch AI slop before it ships
• CopilotKit/OpenBot — Open-source AI coworkers, each with its own browser, files and tools
• expo/skills — Agent skills for Expo projects and EAS

Reddit Hot

• [r/LocalLLaMA] Sam Altman: "Local inference is a terrible allocation of scarce resources" — Predictably unpopular with the sub → Discussion
• [r/LocalLLaMA] Another reason to own your own compute — Warning that accounts may get banned in a sneaky update → Discussion
• [r/LocalLLaMA] vLLM now has PLE disk offload support on nightly — Practical news for running larger models on small hardware → Discussion
• [r/LocalLLaMA] Introducing DeepSeek-V4.1-Flash-1017 Dynamic v3.1 Unsloth GGUFs — Quantized DeepSeek for local use → Discussion

Hacker News Top

• Backdoor in Claude Code for VS Code extension on the Cursor Marketplace (821⬆️) — See Deep Dives
• AI isn't replacing SREs, it's deskilling them (531⬆️) — Automation complacency, 1983 edition
• Sleep framework: A new way for LLMs to retain knowledge in continual learning (184⬆️) — Google Research
• Show HN: A working Nintendo in ~1GB of Qwen weights (209⬆️) — nesformer
• Cisco gives engineer unlimited AI tokens to rewrite legacy code (134⬆️) — Fortune

---

🦞 TL;DR

The narrative today: The AI toolchain itself is now an attack surface. A backdoored Claude Code extension tops HN, while the model-side news is mostly rumor (Betelgeuse) and research (Sleep).

My take: The extension compromise matters more than any model teaser. We hand editor extensions full user permissions and then install AI agents on top of them. A payload that fires before activate means the marketplace is the weak link, not the extension's own code. The saving grace was a macOS bug in the attacker's script, and that's luck, not a defense. Meanwhile the deskilling essay is the right counterweight to the Cisco story: unlimited tokens plus junior engineers is a bet that review skills survive.

What I'm watching: Whether Cursor publishes a full post-mortem on how the tampered builds got onto the marketplace, and whether OpenAI makes the Betelgeuse teaser official.

Stay informed. Stay curious.