Cursor ignored a 0-day for seven months — Jul 15

A seven-month-unpatched Cursor RCE and a Claude memory-exfiltration exploit surface the same day, and the two vendors' opposite response speeds turn security disclosure into a competitive metric. OpenAI reports 2.5x weekly Codex demand growth while Chinese labs keep shrinking open models instead of just matching them, headlined by a 27B model that now runs on an iPhone. Anthropic spends the same day buying goodwill on two fronts, launching free Claude for Teachers and funding Canadian AI research, while Hacker News debates whether AI is eroding independent thought.