Issue 5
OpenAI to cut Cursor's model access in November after SpaceX takeover
OpenAI is ending model service to Cursor after SpaceX closed its $60 billion acquisition of Anysphere. Reports say the wind-down of the contract runs until mid-November. The news emerged in the week of 31 August.
Who is affected and how
- tech lead
- Assess which Cursor workflows depend on OpenAI models, and name a replacement model or tool before November.
- CTO
- The vendor-dependency risk is concrete: keep a multi-model or open alternative in the AI coding-tool stack.
- senior developer
- Check which model your own Cursor rules and prompts are built on, and test switching to another model.
- startup founder
- Dependence on a tool provider can end abruptly, so plan for a model swap in both pricing and architecture.
Claude Code weekly limit rises 25%, but reports say real capacity falls 17%
Anthropic is raising Claude Code's weekly limit by 25% from 14 September. Several reports say that, compared with current limits, this is effectively a 17% cut.
senior developerBefore 14 September, measure your actual weekly consumption and reschedule long agent runs.tech leadRedo the team's Claude Code quota planning and designate a fallback tool for when the limit is hit.CTOThe cost model is changing, so recalculate licence costs and the split between tools.startup founderIf development relies on a single tool's limit, a tighter quota can slow delivery.tool change · globalAI coding tools move to usage-based pricing: Copilot credits and token rates
GitHub Copilot has introduced new limits and charges for premium models, and a DEV Community analysis says most tools have moved away from a flat monthly fee. Comparisons say Cursor also charges…
CTOMonthly AI cost now depends on usage, so introduce budgets and reporting.tech leadGive the team a rule on when a premium model may be used and when a cheaper one is enough.senior developerSave premium models for hard tasks and use a cheaper model for routine work.startup founderDeveloper tooling costs now scale with usage, so choose between Copilot, Cursor and Claude Code on cost.security · globalHidden instruction in a web page can hijack Claude Code; other agents also vulnerable
An instruction hidden in a web page can redirect Claude Code when it summarises the page, without a special exploit, according to reports. The reviewer in LM Studio Bionic also yielded to a prompt…
senior developerWhen an agent is asked to summarise an unknown web page, it should have no write or network access.tech leadInput-filtering and approval rules should be introduced for agent workflows.tool change · globalCopilot code review can now approve pull requests
According to a 1 September report, GitHub Copilot's code review feature can now approve pull requests, not just leave comments on them.
tech leadDecide whether a Copilot approval counts toward required reviews, and in which repositories it can be disabled.senior developerHave a human look over approved PRs too, especially for security and business logic.Hungary
More key stories of the week
AI agents deleted live data: 700 GB, project records and database rows
According to reports, an AI agent deleted 700 GB of important data, and Claude Code deleted 15% of the records of the Bengaluru inscriptions project. In other cases, an agent deleted rows from a…
senior developerAn agent should be able to run destructive commands only with human approval.tech leadAgent access must be set per environment, and a shared production database is not acceptable.CTOTesting backup and restore is a precondition for deploying agents.open source · globalNvidia to buy Hugging Face for $12.9 billion
According to WIRED, Nvidia is buying Hugging Face, the central platform for open-source AI developers, in a $12.9 billion deal. A Hungarian report says the platform was recently hacked by a rogue…
CTOThe primary platform for open models and datasets is passing into the hands of a chipmaker, so dependency risk needs to be assessed.tech leadIt is worth mirroring critical models and datasets.startup founderPlatform dependency for products built on open models may change.incident · globalAurora ransomware operators used Cursor AI in attacks, reports say
The Aurora ransomware group used Cursor AI in attacks, according to reports. The reports cite 7 and 10 affected organisations respectively. The news appeared on 31 August.
CTOAttackers' use of AI tools has become part of the threat model.open source · globalLinux kernel nears record 2,000 vulnerabilities per release as AI bug hunters flood maintainers
The kernel is approaching 2,000 vulnerabilities per release as AI-based bug hunters examine 40 million lines of code, and maintainers say they are "completely overwhelmed". AI crawlers are also…
senior developerOpen-source maintainers are best served by high-quality, reproducible bug reports.research · United StatesMIT study: AI coding tools produce more code, but not more releases
An MIT study finds that AI tools produce more code, but that does not translate into more shipped software. According to the September 2 report, the gap between writing code and delivering it is…
CTOMeasure speed gains with release metrics, not lines of code.tech leadThe bottlenecks are review, testing and integration; that is where to strengthen the process.QA testerMore generated code means more verification work, so prioritize test automation.release · globalGoogle unveils Gemini 3.8 Flash and a security-focused Cyber variant with stronger coding
Google has introduced Gemini 3.8 Flash, which reports say has noticeably improved coding capabilities, along with a Cyber variant intended for security tasks. The Cyber variant was measured on…
senior developerAs a cheap, fast coding model, it can be compared with current tools.tech leadA measurement on your own codebase should decide whether switching is justified.tool change · globalOpenAI Codex has 25 million active users; GitHub Copilot reaches 50 million
OpenAI's Codex lead says active users have reached 25 million and paid usage quotas have been reset. According to Microsoft-related news, GitHub Copilot has reached 50 million users.
CTOAI coding tools have gone mainstream, so tool choice is a vendor-strategy question.tech leadA large user base means a fast feature pace, so re-evaluate tools every six months.open source · globalOWASP OASIS and Broadcom TrueSource target open-source vulnerabilities at scale
OWASP has launched the OASIS AI initiative to fix open-source vulnerabilities at scale. Broadcom's TrueSource aims to secure enterprise open-source software.
CTONew vendor options have appeared for enterprise open-source protection strategies.research · globalGitHub's Project HydraFusion uses multiple models to reach frontier-level quality in Copilot
The GitHub Blog presented HydraFusion, a research project that uses multi-model orchestration to approach the quality of the best models. A summary of it also appeared in Hungarian on 4 September.
tech leadCombining models can be a cost–quality alternative to relying on a single expensive model.CTOWatch how Copilot's model-selection strategy changes its pricing and quality.senior developerPer-task model selection can also be tested in your own agent chains.survey · globalMore large firms build software in-house with AI instead of buying it, but profits come slowly
Surveys indicate that companies are more likely to build software in-house with AI tools than to buy it externally. 32% of respondents say in-house development is feasible, rising to 41% at…
CTORecalculate the build-or-buy decision, but expect benefits to arrive more slowly than hoped.startup founderSoftware vendors increasingly compete with the customer's own AI-assisted development.tech leadIn-house development requires budgeting for maintenance and quality assurance.release · globalAnthropic launches Claude Fable 5.1 and Mythos 5.1, now available in GitHub Copilot
Anthropic has introduced the Claude Fable 5.1 and Mythos 5.1 models, which it promotes for coding and knowledge work. Fable 5.1 became generally available in GitHub Copilot on 1 September.
senior developerFor long-running, agent-based tasks, it is worth comparing the new model with the current one on your own codebase.tech leadIt is available in the Copilot model picker, so the team's default model can be re-evaluated on cost and quality.open source · globalOpen-source AI projects face flood of AI-generated pull requests and maintainer burnout
Leading open-source AI projects are introducing new rules to manage thousands of contributors; according to Latent Space, pull requests are no longer welcome. The articles report that maintainers are…
senior developerBefore contributing to an open-source project, check its AI policy and avoid submitting AI suggestions you have not reviewed.tech leadDraft an AI contribution policy for your own open-source project.junior developerSubmit an AI-assisted PR only after reviewing it yourself and running tests.