Phorion found a persistent SSH backdoor in versions 2.1.312 and 2.1.313 of the official Claude Code VS Code extension on the Cursor Marketplace. Cursor has removed both versions. Developers and teams who installed the extension should check their machines now, since the payload runs as soon as the extension loads.
Simon Willison argues that October 2026 is when AI models became good enough at game design to make vibe coded games genuinely fun. He built four browser games mostly with Claude Opus 5.5 and shares the prompts and workflow he used. The post is a practical look at iterating with coding agents, and at where GPT-6 models still fall short.
How should you configure Claude Code permissions so a coding agent can build and test a .NET project without gaining database or publish authority? This guide explains the documented rule order, settings scopes, wildcard risks, and boundaries for migrations and deployments. It is worth reading before you run agents unattended on .NET repositories.
The built-in terminal in JetBrains IDEs now runs on libghostty starting with version 2026.3, replacing the older JediTerm emulator. CLI agents such as Claude Code and Codex get modern keyboard protocols, automatic theme switching and far better rendering of terminal output. Developers who run agents inside the IDE will notice the difference right away.
Anthropic shared research on using Claude to find code that a deployment can reach but does not need, then restrict or remove it. Across 25 open-source projects with over five million lines, it reported 493 issues. In OpenSSH, about 4,500 lines of experimental post-quantum signature code reachable before authentication were addressed in releases 10.5 and 10.6. It is a concrete method for teams using AI in security reviews.