Data Security

OpenAI to train on Daybreak Blue data from Nov 29 despite user opt-outs: Starting November 29, OpenAI will train on Daybreak Blue cybersecurity session data even when users turned off training, The Decoder reported. After backlash, a follow-up email promised a separate opt-out; the move revived concerns over using unpublished research by mathematicians without consent.

AI Policy • The Decoder

Tampered Claude Code extension on Cursor marketplace exposed up to 5,000 users over 11 hours: A tampered Claude Code extension was available on Cursor's marketplace for about 11 hours, affecting up to 5,000 users. It attempted to steal user data and set up remote access, prompting Cursor to take the marketplace offline; it was reinstated after no further risk was confirmed.

Security • The Decoder