Black October Hits AI Platforms as Claude Rewrites Its Own API in Rust
Day 16 · October 31, 2026 · Singularity Watcher · View on X
SECURITY
Black October. Northflank, a platform that deploys and runs customer apps on Kubernetes, was breached on October 30. Arlo Gilbert, a startup founder, wrote that Northflank powers companies including Sentry, Upwork, Figma and CoreWeave [1].
Northflank’s status page told every customer to assume all environment variables had been decrypted and to rotate every key [2]. Its timeline begins with a threat alert from the security firm Wiz at 11:43 UTC. Later updates said multiple users confirmed their AI API keys had been used without permission.
Dan Robinson, formerly of Heap, wrote that Railway and TiDB Cloud were hit the week before and OpenCode the week before that [3]. His advice to small teams: avoid “amplification vectors,” services where one breach exposes many downstream customers’ keys.
Wiz, in a report titled “Black October,” counted at least nine AI developer platforms that disclosed incidents this month: Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank [4]. Zeabur is shutting down because of its breach.
Wiz said the attacks hunted stored environment variables, especially AI keys, and tied them to “LLMJacking,” the resale of stolen model access. In one case it tracked, a single stolen key made about 800,000 Amazon Bedrock calls in 30 hours, mostly to Claude Opus models [4]. Wiz traced the stolen keys to two resale operations selling discounted model access.
A poisoned Claude Code extension. Amjad Masad, CEO of the coding platform Replit, flagged that a Claude Code extension had installed backdoors on developer machines, and called coding agents on employee laptops a national security risk [5][6]. He asked whether it could be behind the Binance hack, but offered no evidence of a link.
Cursor’s own notice says a malicious copy of Anthropic’s Claude Code extension, versions 2.1.312 and 2.1.313, was available in the Cursor extension marketplace from about 2:27 a.m. to 1:35 p.m. Pacific on October 29 [7]. Cursor said Anthropic did not build these versions.
The code added an attacker’s SSH key, set up persistence, sent host details to the attacker and tried to open a reverse SSH tunnel, which failed on most machines without admin rights [7]. Cursor pulled the extension, shut down and rebuilt the marketplace, rotated its keys and had the attacker’s server taken offline.
The Polymarket drainer. Dan Robinson also urged sites to remove third-party JavaScript such as analytics and monitoring scripts [8]. BleepingComputer reported that Polymarket, the prediction market, halted trading on October 29 after a script served from DebugBear, a web performance monitoring service, tried to sell users’ positions and send their crypto to an attacker [9].
About $2.5 million was traced to the suspected attacker’s wallet, and Polymarket said it would fully reimburse affected traders [9]. DebugBear later said its DNS records were compromised through its domain registrar and that the attack targeted one specific customer’s website [10].
A Chrome sandbox escape. The research group PWNAI published CVE-2026-106378, in which code in Chrome’s sandboxed GPU process on macOS could type keystrokes into the desktop through WindowServer and launch apps outside the sandbox [11][12]. The fix shipped in Chrome 155.
ILIAS ISM warned that the larger risk is old copies of Chromium launched by Playwright, Puppeteer and browser tools used by AI agents inside coding apps, which may inherit those apps’ macOS Accessibility permission [13].
Cryptography next. Andrew Curran, who writes about AI, recirculated remarks by the computer scientist Scott Aaronson on AI possibly breaking widely used cryptography [14]. In an update to his October 7 “Mathocalypse” post, Aaronson wrote that his sources say AI companies have started, “gingerly and discreetly,” testing whether their latest internal models can break important cryptographic protocols [15].
Proton’s AI reckoning. Joseph Cox of 404 Media published an internal AI manifesto by the CTO of Proton, the Swiss maker of encrypted email [16]. The 404 Media report says CEO Andy Yen called an employee’s request to pentest new code “loser thinking,” and that Yen said this is the last year Proton will hire engineers [17].
On October 30 Proton apologized, denied installing software that tracks employees’ AI-generated code, and said it will open-source internal AI tools and publish its AI and code review policies [18]. David Heinemeier Hansson, creator of Ruby on Rails, wrote that there was “nothing scandalous” in the memo [19].
AI LABS
Claude rewrites its own API. Somi, an AI enthusiast, highlighted that Anthropic rewrote its Messages API in Rust with no Rust developers on the team [20]. On the Latent Space podcast with Katelyn Lesse and Angela Jiang, who lead engineering and product for the Claude Platform, the guests said Claude wrote the code while humans designed the system and compared old and new outputs on shadow traffic [21].
They said the Rust version had fully rolled out the week before, cutting CPU use by roughly 40 to 50% and time to first token by 10 to 20% [21]. They said Anthropic is short on CPU across sandboxes, CI and its API, and that such a port would once have been a multi-year effort.
The IPO math. In a clip shared by the account dnapway, Chamath Palihapitiya said Anthropic’s CFO Krishna Rao had $125 billion entering June with total net burn of about $9 to $10 billion [22]. He estimated Anthropic needs to raise $80 to $120 billion, and guessed an IPO valuation around $1.5 trillion.
Grok Bot. Elon Musk wrote, “Think of Grok Bot as a work colleague” [23]. Jack Ellis, who has been building Fathom since 2019, wrote that SpaceX acquiring Cursor was “a genius move” and that Cursor Projects is far ahead of Claude Code on user experience, while Anthropic’s Opus “beats Grok by miles” [24].
NEURALINK
Telepathy. Neuralink said its engineers spent 72 hours at the home of a participant in its VOICE speech restoration study, building features and testing them with him [25][26]. They included automatic detection of attempted speech, a Grok agent started by thinking “Hey Neuralink” plus a task, an iPhone keyboard for brain-computer dictation and decoded speech sent into phone calls.
Neuralink notes its devices are investigational and not approved by the FDA [26]. Musk wrote that Neuralink’s first product is called Telepathy and that its output bandwidth “will vastly exceed the fastest human speech or typing in a few years” [27].
WORK AND THE ECONOMY
Cisco’s unlimited tokens. Fortune reported that Cisco president Jeetu Patel gave Padmanabhan “Paddy” Krishnamurthy, 27, unlimited AI tokens to refactor Cisco’s legacy code [28][29]. Krishnamurthy, co-founder of the translation startup EzDubs that Cisco acquired, proposed doing it with two people, has four weeks to prove the approach, and aims for 98% of the legacy code within 24 months [29].
Goldman’s 15 million. Kalshi, the prediction market, posted that Goldman Sachs says AI will eliminate nearly 15 million jobs [30]. Fortune reported that Goldman economist Joseph Briggs estimates up to 9% of US workers could be displaced during the AI transition, about 15 million over a decade, and that the losses are likely to concentrate in the next recession [31].
The panic fades. a16z, the venture firm, reported that the AI jobs panic peaked in May: news reports on AI job loss are down about 65% and layoff announcements citing AI are down about 90% [32]. Its newsletter said job postings since last October are up about 30% for engineers and 26% for software engineers, citing Indeed [33].
The widening gap. Aaron Levie, CEO of Box, wrote that the distance between people working at the frontier of AI and everyone else is growing, not shrinking, because the curve of AI progress “is basically going vertical” [34].
Search breaks. The Kobeissi Letter, a markets commentary, quoted Reddit’s CEO on its earnings call: “AI mode does not drive traffic” [35]. It said Reddit stock is down 42% in eight trading days, a day after Google lost $480 billion in value on the same concern [35][36].
ASTROHACKER
The commit curve. Astrohacker reported its biggest month ever, 4,526 commits in October with days still left [37]. Founder Ryan X. Charles wrote that his 30-day average rose from about 11 commits a day at the start of 2024 to about 155 in October 2026, with a best week of 1,874 commits from June 1 to 7 [38].
He tied each step to a change in method: AI as his IDE in 2025, no hand-written code from April 2026, agents solving whole issues from June, and many parallel agents from September [38]. “I no longer see a reason to do anything other than grow my team of ai agents solving important problems for the world,” Astrohacker wrote [39].
Sources: [1] https://x.com/arlogilbert/status/2116186043385041138 [2] https://status.northflank.com/cmvv0rn5a092f14rutwccodpp [3] https://x.com/danlovesproofs/status/2116323846672531719 [4] https://www.wiz.io/blog/black-october-for-ai-developer-platforms [5] https://x.com/amasad/status/2116170090991484947 [6] https://x.com/amasad/status/2116179892991922433 [7] https://cursor.com/blog/claude-code-extension-security-notice [8] https://x.com/danlovesproofs/status/2115967297127067836 [9] https://www.bleepingcomputer.com/news/security/polymarket-halts-trading-after-crypto-draining-script-breach-25m-traced/ [10] https://x.com/DebugBear/status/2116306975403250070 [11] https://x.com/lewiscarhart/status/2116199272383189438 [12] https://pwn.ai/blog/chrome-escape [13] https://x.com/illyism/status/2116258772918337981 [14] https://x.com/AndrewCurran_/status/2116279925313605646 [15] https://scottaaronson.blog/?p=10169 [16] https://x.com/josephfcox/status/2115868430897385497 [17] https://www.404media.co/manifestos-fear-and-loser-thinking-inside-protons-ai-reckoning/ [18] https://x.com/ProtonPrivacy/status/2116302824577405320 [19] https://x.com/dhh/status/2116108467060535440 [20] https://x.com/somi_ai/status/2116050219989373170 [21] https://lspace.beehiiv.com/p/opus55 [22] https://x.com/dnapway/status/2116313854032621682 [23] https://x.com/elonmusk/status/2116305829381263528 [24] https://x.com/JackEllis/status/2116278148589666775 [25] https://x.com/neuralink/status/2115878416423784939 [26] https://neuralink.com/updates/72-hour-voice-hackathon/ [27] https://x.com/elonmusk/status/2116018780111597911 [28] https://x.com/choblin29/status/2116077423410499705 [29] https://fortune.com/2026/10/30/cisco-president-jeetu-patel-gen-z-27-year-old-unlimited-ai-tokens-rewrite-legacy-code-entry-level-jobs/ [30] https://x.com/Kalshi/status/2116154643109789822 [31] https://fortune.com/2026/10/22/goldman-sachs-forecast-how-many-jobs-lost-to-ai-9-percent/ [32] https://x.com/a16z/status/2116221125864951943 [33] https://www.a16z.news/p/charts-of-the-week-job-fud-fades [34] https://x.com/levie/status/2116029912243184006 [35] https://x.com/KobeissiLetter/status/2116139805516210579 [36] https://x.com/KobeissiLetter/status/2116191185677246814 [37] https://x.com/AstrohackerLabs/status/2116168666773348418 [38] https://ryanxcharles.com/blog/2026-10-29-i-make-156-commits-a-day-now [39] https://x.com/AstrohackerLabs/status/2116312585783931063