SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Anthropic and OpenAI cut API access to Windsurf and Cursor, exposing platform risk

0
·1 views

Anthropic terminated Windsurf's access to Claude 3.x models and blocked future Claude 4 access with less than five days' notice, affecting over a million developers. The move followed leaked reports of a potential $3 billion OpenAI acquisition of Windsurf, with Anthropic citing competitive concerns as the reason for the cutoff. In a separate incident, OpenAI invoked a change-of-control clause after SpaceX acquired Cursor's parent company Anysphere, terminating Cursor's contract with a 76-day shutdown notice. Both cases highlight a structural vulnerability in AI coding tools, which rely on third-party frontier model APIs governed by external companies' terms of service. Developers and startups dependent on these tools risk sudden disruption whenever business relationships between competing AI labs break down.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

AI-Generated Works Get No US Copyright Protection, Courts and Officials Confirm

Under current US law, works produced entirely by artificial intelligence cannot be copyrighted because copyright requires a human author, regardless of how detailed or iterative a user's prompt was. The US Copyright Office reaffirmed this position in its January 2025 report on AI and copyright, concluding that existing law already addresses the issue without need for new legislation. Courts have backed this stance, most notably in Thaler v. Perlmutter, where the DC Circuit ruled in 2025 that copyright demands human authorship, and the Supreme Court declined to revisit that ruling in 2026. However, distinctly human contributions woven into an AI-assisted work — such as original writing, editorial choices, or creative selection and arrangement — can still qualify for protection. The UK has historically taken a different approach by allowing limited protection for computer-generated works, though that policy is now under review.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How Composite Indexes and Query Rewrites Can Cut SQL Latency by Over 1,000%

As databases scale to millions of records, poorly optimized SQL queries become a major performance bottleneck, straining CPU resources and degrading user experience. Common pitfalls include using SELECT * in production, which increases I/O overhead and prevents covering indexes from functioning efficiently. Tools like EXPLAIN in MySQL and PostgreSQL help developers inspect query execution plans and identify full table scans or missing indexes before making changes. Composite indexes can dramatically speed up multi-condition queries, but column order matters — high-selectivity columns should be placed first to maximize index usage. Wrapping indexed columns in functions within WHERE clauses also invalidates index lookups, and rewriting such queries as explicit range comparisons restores fast index scans.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

N-able patches CVSS 10.0 RCE flaw in N-central amid reports of active exploitation

N-able has released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) to address CVE-2026-86218, a pre-authentication remote code execution vulnerability scoring 10.0 on the CVSS scale. The flaw affects self-hosted and N-able-hosted N-central deployments, and successful exploitation could grant attackers code execution on the RMM server without valid credentials. Security firm Huntress noted conflicting vendor communications — some suggesting active exploitation in the wild, while official release notes stopped short of confirming production incidents. Huntress also flagged that log rotation at an affected customer site prevented definitive attribution of a specific incident to this vulnerability. Two related but separate vulnerabilities, CVE-2026-86206 and CVE-2026-86207, were also disclosed; the earlier Hotfix 3 does not address CVE-2026-86218.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Critical Adobe Commerce Zero-Day CVE-2026-75650 Exploited to Deploy Rust Backdoor

A critical unauthenticated remote code execution vulnerability, tracked as CVE-2026-75650 and dubbed StyleSmuggler, affects Adobe Commerce and Magento Open Source installations. Discovered and reported by Sansec, the flaw allows attackers to inject PHP into the template system, which then executes when the server renders a failed payment notification email — requiring no user interaction. Active exploitation has been observed deploying a Rust-based Linux backdoor, with some variants also dropping PHP web shells; the malware communicates via WebSocket over TLS or NTP-like UDP traffic on port 123. Adobe has released a hotfix under security bulletin APSB26-146, though applying it does not remove existing malware or invalidate credentials that may already have been compromised. Store operators are advised to apply the patch immediately, audit templates, check for unauthorized files under pub/media, and review processes and cron entries for signs of compromise.

0 comments Read more at DEV Community
Anthropic and OpenAI cut API access to Windsurf and Cursor, exposing platform risk · ShortSingh