Cursor says an attacker obtained an access key it had issued to Fireworks, its third-party training and inference vendor, and used it to copy data from a read-only storage bucket holding coding agent traces, mostly from 2025, from…
In the News: November 14, 2026 (Extra)
Cursor traces its breach to coding agent traces shared with a vendor, some still holding unredacted credentials.
Extra edition
Machine-readable
Download Markdown
Story
Cursor says its breach began with agent traces that still held credentials
Read story →
Story
Maintainers flagged 1,786 pull requests as AI slop and merged 11
The authors searched 10,000 popular, mature GitHub repositories for pull requests that maintainers had titled or labelled as slop. After removing false positives they kept 1,786 PRs from 76 repositories, covering the period up to the end of…
Story
Eon reviews 33 public cases of agents breaking production
Eon, which sells cloud backup and recovery, tracks public cases where an AI agent's own actions damaged live production data or systems and a first-party source says so. Of the 33 production cases, 29 are self-reported and 18 come from…
No AI Slop: A Manifesto
Introduced by Dex Horthy in the summit's closing keynote, according to Latent Space. It defines slop as putting "less effort into producing something than we ask the consumer to spend understanding it", and its signers commit to saying when an agent wrote something and to reviewing at least some subset of outputs, scaled to the stakes.