News 4 u.

A malicious Claude Code extension distributed through Cursor’s Open VSX-based marketplace ran when activated and attempted to establish SSH access, persistence and an attacker-controlled connection. Cursor removed the package, rebuilt its marketplace and disabled the server, but those actions do not clean affected machines. The source estimates that up to 5,000 users may have been exposed and says the compromise route remains unknown. Users of version 2.1.313 need remediation, credential rotation and endpoint review.

Startups are assigning sales, marketing, coding, recruiting and administrative work to semi-autonomous AI agents, sometimes using far more agents than human employees. Workers report faster execution and lower staffing needs, but also spend time correcting fabricated or mistaken outputs and managing multiple systems. The shift is changing hiring priorities and reducing entry-level opportunities, while automated customer contact can feel impersonal or waste recipients’ time. Early adoption does not yet establish broad productivity gains, and the workforce effects remain unsettled.

Binance says attackers affected about $6.3bn in digital assets, potentially the largest crypto theft reported, after compromising systems used to authorize withdrawals. The exchange says it will cover losses, but much of the stolen value remains with the attackers and the investigation has identified more than one possible breach point. Analytics and security firms link the incident with high confidence to North Korean operators, though Binance has not confirmed that attribution.

The Federal Reserve kept its federal funds target range at 3.75% to 4% in a 10–2 vote, citing resilient domestic spending, strong productivity and robust capital investment. The committee said job gains remain consistent with workforce growth but acknowledged that inflation is still elevated and uncertainty remains high, partly because of geopolitical developments. Two governors dissented in favor of a quarter-point increase. The Fed said it needs more information to judge the policy stance consistent with returning inflation to its 2% goal.

DoorDash plans to acquire Instacart for $17 billion, its largest acquisition, combining DoorDash’s delivery network with Instacart’s grocery selection and substitution capabilities. The deal is valued at $65 a share, at least 75% cash, and is expected to close by late 2027 or the first half of 2028 if approved. Instacart would retain its brand and app, while the companies say shoppers could eventually access 150,000 stores. Regulators may scrutinize the transaction’s competitive effects.

Spain’s transport minister says he will remain in office while investigators examine a high-speed rail collision that killed at least 69 people. A preliminary report found the Renfe train was traveling at roughly 160–200 km/h when it struck a stationary Iryo train near Urda. The minister said a computer failure halted several trains before the collision and that a train was later cleared to move without restrictions. Political opponents and unions are demanding his resignation, while the government investigates possible human error and wider system failures.