Sunday was a quiet one — four items, no arXiv feed (weekend skip), no fresh cross-platform launch. The day’s biggest story is day-2 fallout from yesterday’s OpenAI–Cursor split: Cursor co-founder Michael Truell says OpenAI was only ~5% of traffic and that Cursor trusted it to stay “neutral,” with Musk shrugging it off. The real artifact on the stack is a detailed break of Claude Code’s Auto Mode — 60–80% injection success against Anthropic’s commissioned 0.00% claim, attack chain fully written up. Around it: the largest music-industry copyright suit yet against a lab, and a first-party change to Claude Code’s weekly usage limits.

Lead: Cursor fallout

Agent frameworks & tooling

  • Breaking Claude Code Opus 5 Auto Mode — Embrace The Red’s Johann Rehberger walks a full attack chain — WebFetch→curl→ZIP→struct.py module shadowing→code execution with a real C2 callback — hitting 60–80% success on a small sample, against the 0.00% indirect-injection success rate in the third-party eval Anthropic commissioned for Opus 5 Auto Mode. The key lesson for anyone running Auto Mode: it is a convenience classifier, not a security boundary — sandbox the agent and restrict egress. The safety classifier even blocked Claude’s own cleanup command in some runs. (lobste.rs)

Industry

  • Sony Music Publishing and Warner Chappell sue Anthropic — the two publishers file a multi-billion-dollar complaint alleging Claude was trained on lyrics scraped from MusixMatch/LyricFind plus books from Common Crawl/The Pile/Books3, leaning on the $1.5B book-author settlement as precedent (“cost of doing business”). Allegations, not findings — but it’s the largest music-industry suit yet against a lab and extends the training-data litigation wave that touches every model pipeline. (Techmeme)
  • Anthropic to permanently raise weekly Claude Code limits 25% on Sept 14 — small but dated and first-party: the “permanent” raise nets out to a ~17% cut from today’s 50% promotional boost, so plan weekly usage accordingly if you run Claude Code hard. (Techmeme · X @claudedevs)
All gathered items - what was cut and why (9)