Monday, November 2, 2026 brief

Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features

Wired

This story is part of the morning brief A fake Claude Code extension in the Cursor marketplace tried to backdoor developer machines over SSH. The reporting lives at the original source.

Read at Wired

Plus Chainalysis discloses a breach driven by agentic attack tooling, and Sophos shows a ransomware crew handing its intrusions to AI agents.