Vercel projects can now evaluate one another’s feature flags without copying SDK keys between them.

Restaurant discovery app Zest launched an AI concierge you reach by text. It suggests places based on where your card says you actually eat, and it can reserve through OpenTable, Resy and SevenRooms.

Epoch AI says the freely available GLM 5.3 model built working attacks on six recent Firefox releases for roughly $1,000 each by studying fixes that had not shipped yet. Mozilla has patched and is changing how it releases fixes.

Researchers found flaws in the built-in browsers of Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop. The Codex and VS Code issues were still unpatched at publication, so be careful what local files you open.

A new GSA agreement gives US government buyers 40% off Claude on a pay-for-what-you-use basis, with no minimum order. It replaces the $1-per-user promotion that runs out on October 31.

CrowdStrike says a China-linked group used an AI agent framework running mostly on DeepSeek to target more than 200 organizations in 11 days. It confirmed follow-on hacking at nine of them.

Tampered builds of the Claude Code extension, versions 2.1.312 and 2.1.313, were served through Cursor’s marketplace on October 29 and tried to plant an SSH backdoor. If you use Cursor on a Mac or Windows PC, run Cursor’s quick check.