What's New in Bots: Oct 30, 2026
Cursor pulled a fake Claude Code extension from its marketplace, OpenAI doubled Work and Codex usage on its top plans, and Claude's mobile apps picked up CarPlay, so here is what is new in bots.
Cursor: check your Claude Code extension
Cursor posted a security notice on Oct 29. A maliciously modified copy of Anthropic's Claude Code extension (version 2.1.313, not built by Anthropic) sat in the Cursor extension marketplace from about 2:27 AM to 1:35 PM PT that day, and at most 5,000 users were affected. It tried to plant an attacker's SSH key and a persistent tunnel. Cursor took the marketplace down, rotated keys, worked with the host to knock the attacker's server offline, and says no other extensions were touched. If you installed or updated in that window, run the check in the notice, follow the cleanup steps (uninstalling alone may not be enough), rotate credentials, and move to Claude Code for VS Code 2.1.314. It is a good week to pin your bot dependencies and check before you install, two habits from our guide to using open source with your bots.
ChatGPT: more Work and Codex usage
Per the ChatGPT release notes for Oct 29, Pro 100 and Pro 500 now include twice their previous Work and Codex allowance. OpenAI also canceled the Pro 200 reduction it announced in September, so Pro 200 subscribers on the lower allowance get doubled too. Eligible Pro and Business subscribers can now turn on promotional API credits for a linked API organization. More headroom is good news if you run long running tasks.
Dots: widgets and Shortcuts
OpenAI's weekly what's new adds a Your dot Home Screen widget on iOS, with optional message and call buttons, plus an Open your dot action in Apple Shortcuts that you can put on the iPhone Action button. It needs ChatGPT for iOS 1.2026.279 and dot access. (Texting your dot was in yesterday's roundup.)
Claude: mobile upgrades and a Duet walkthrough
Anthropic listed a batch of Claude mobile upgrades on Oct 29. You can stay signed in to more than one account on iOS and Android, the app is in 24 more languages (33 in all), voice mode on iPhone works with Apple CarPlay, voice answers sooner and hears you better in a noisy room, and Claude on Android now acts like a laptop app on Chromebooks and foldables. Pull down to search is coming soon on iPhone and iPad. On the Claude Duet side, lead Karan Ahuja shared a walkthrough of Tasks and Channels, the two building blocks of the app, and asked people off the waitlist for feedback.
Microsoft Copilot: finance skills
Microsoft added more than 25 finance skills and partner plugins on Oct 29, covering accounting, capital markets and corporate finance in Copilot in Excel and Cowork. Partners include QuickBooks, Xero, Zoho Books and Mercury, and Excel can keep an audit trail of what Copilot changed and why. Separately, Office in Copilot, which puts Word, Excel and PowerPoint inside the Copilot app, starts rolling out worldwide in mid November.
Google Gemini: edit files in chat
Google says you can now generate, preview and edit files right in the Gemini app, including Docs, Sheets, slide decks, PDFs, Markdown and code. PDFs work on web and mobile; the other formats are web only. It is available to all users in every language Gemini supports.
OpenClaw: security patch
OpenClaw shipped v2026.10.9 on Oct 29, a patch release with no new features. It fixes vulnerable dependencies, credential handling and workspace restrictions, plus update and recovery bugs. If you self host, update.
Quick Facts
- Do today: if you use Cursor, check for Claude Code 2.1.313 and move to 2.1.314.
- New today: doubled Work and Codex usage on ChatGPT Pro, Claude voice in CarPlay, file editing in Gemini.
- A day like this is why we keep a human in the loop. Compare the bots yourself in the directory, or set them up for your crew with team bots.
See you tomorrow.