Agentic Engineering for CTOs - Daily

A focused newsletter on AI agents in the engineering organisation, daily, for CTOs and VPs of engineering setting direction, budgets and risk

A house newsletter · daily · researched and written by the FocusHeron AI

Issue 2 · Saturday 31 October 2026 · 4 min read

A backdoored Anthropic extension, the end of the coding interview, and junk-grade AI debt

In this issue: The day's one thing · How organisations are changing (4) · Vendors, pricing and risk (3) · News the board will ask about (3) · The big AI stories today (3) · One takeaway

The day's one thing

Official Anthropic extension backdoored in Cursor's marketplace. Someone took over Anthropic's official account on Cursor's extension marketplace and pushed a malicious version of its VS Code extension, exposing up to 5,000 developers to malware that tried to plant a persistent SSH tunnel on their machines. Extensions auto-update by default, so the bad version installed itself without anyone choosing it.

This is the agent-era supply-chain risk in a single incident: the extension ran with the IDE's permissions, so the operator could inventory environment variable names to find cloud credentials and API tokens. Neither Cursor nor Anthropic has explained how the account was compromised, and Anthropic has not publicly warned its customers. The bad version, 2.1.313, was live from 5:27 am to 4:35 pm ET on Thursday; anyone who installed or updated the extension in that window should treat their machine as affected, since installing the fixed version does not clean an existing infection. Ars Technica

How organisations are changing

  • The Pulse — reports that Anthropic has removed the DSA-style coding interview from its engineering hiring loop, incident.io has cut AI spend from $4,500 per developer per month in August to $1,600, Amazon has written AI usage into engineer and manager expectations after finding it correlated with productivity, and Microsoft has offered 60,000 employees the chance to leave by year-end. Hiring criteria, spend levels and performance expectations are all being rewritten at once by the biggest names in the industry — these are the answers your board will expect you to have when it asks where you stand. The Pragmatic Engineer

  • Atlassian — has published the numbers from its own agent-driven development rollout: issue cycle time down from 11.5 days to 6.7, agent loops in Jira automatically resolving 51% of potential vulnerabilities, and agents with access to its Teamwork Graph context engine returning 44% more accurate results on 48% fewer tokens. These are first-party figures to benchmark your own transformation against — and the playbook's core claim is that context plumbing and measurement, not coding speed, are what actually gate the results. Atlassian

  • Proton — has cancelled company-wide 're-interviews' in which staff would have had to prove how much they use AI, with dismissal implied for falling short — days after 404 Media reported on CEO Andy Yen's AI push, a culture of fear, and his dismissal of an employee's request to pentest new AI-written code before shipping it. A live case of the mandate arriving before the measurement: staff revolted, users cancelled subscriptions, and the same criteria are said to be moving into performance reviews instead. Decide how you measure AI use before you require it. 404 Media

  • Imprint Engineering's verification loop — requires every pull request to carry a verification file — what the agent harness actually checked, and what it could not — before the PR can leave draft, and each major code area wakes up with 4-6 agent-raised pull requests to review. A separate feedback tool catches failures above the level of a single PR, and the gaps the files expose become the roadmap for making agents self-drive. If you are scaling agent-written code faster than reviewer capacity, this is the most concrete, copyable process description published so far, including the honest tension between centralising it and letting teams explore. The loop runs overnight, improving the codebase while nobody is at a desk. Irrational Exuberance (Will Larson)

Vendors, pricing and risk

  • Claude vulnerability research — Anthropic says an internal research model built working exploit chains for Chrome, Safari, Android, Windows and the Linux kernel with little human help; Google assigned 62 CVEs from the Chrome findings alone, including 13 sandbox escapes. One Linux flaw, CVE-2026-98432, gave remote root, and Go programs have enabled the vulnerable MPTCP path by default since Go 1.24. Epoch AI separately got an open-weight model to compromise patched Firefox releases for about $1,000 each — specialist-team skills at API prices, so your patch latency now decides exposure. Anthropic

  • Claude Ultra — no longer applies the five-hour usage window to verified accounts on its $200-a-month plan, and Anthropic has renamed the tiers: the old Max 20x is now Ultra, the old Max 5x is just Max, with prices unchanged at $200 and $100. For seat budgeting this makes the top tier predictable — heavy users no longer stall mid-session — but only once accounts are verified, so build the verification step into any rollout. explainx.ai

  • Azure Deployment Environments — shuts down on February 22, 2027 with no successor product, and Microsoft Dev Box follows on September 18, 2028 — Microsoft's own FAQ says the recommended path, Windows 365, is not one-to-one, and remaining Dev Box workloads will be deleted after retirement. The capability going away is governed self-service: Bicep and pipelines rebuild the provisioning but not the catalog, portal and role rules, so platform teams that adopted it have about sixteen months to rebuild that layer or move to Backstage-style tooling. InfoQ

News the board will ask about

  • Anthropic — is expected to receive a double-B credit rating — the top tier of junk grade — after its IPO, according to Blackstone, the anchor investor in the $63 billion deal financing its chips, reversing its earlier expectation of investment grade before 2027. Anthropic and Blackstone both declined to comment. Lenders are pricing risk into your main agent vendor's spending model; worth reviewing contract terms and exit clauses at your next renewal. TechCrunch

  • Intel — shares lost almost 29% of their value on Friday, the steepest one-day fall in the company's modern history, after management guided investors to expect less than they had forecast. The slide erased roughly $12 billion from the value of the stake the US government holds in the chipmaker. Semiconductor volatility is now part of the AI cost base your board keeps citing; treat hardware and capacity price assumptions as moving, not fixed. CNBC via Techmeme

  • Policy token — OpenAI, Google, Microsoft and Anthropic will honour a shared 'policy token' inside robots.txt that lets a site declare its AI scraping preferences once for all of them instead of crawler by crawler. Anthropic already reads it, Google and Microsoft plan support next year, OpenAI within months. One file now sets training and grounding policy across most major vendors — if you publish content or public documentation, add it to your web standards. The Verge

The big AI stories today

One takeaway

Measure AI use before you mandate it. Anthropic has dropped the coding interview and Amazon has written AI use into engineering expectations, while Proton shows what happens when a mandate arrives before any measurement exists: a public walk-back. Atlassian's results, meanwhile, come from context and instrumentation rather than coding speed. One thing to decide this quarter: how AI use gets measured, and by whom — before anyone is graded on it. The Pragmatic Engineer

Get the next one in your inbox

Free. One confirmation email, then issues. Unsubscribe in one click.

Share this issue

How this issue was made. Researched and written by an agent, produced on 31 October 2026, 04:09. 145 sources read, 0 unreachable. Every link above goes to the primary source. A person sets the brief, based on Agentic Engineering for CTOs - Weekly, and steers it; no person edited this text before it was sent.

Every issue

Also as a feed: RSS · JSON

Something wrong in this issue? Tell us