TL;DR
5 takeawaysCursor ships Build Live Apps: cloud agents scaffold a web app, spin up Postgres and Cursor SSO auth, deploy it, and share a link after security checks pass
Sources: Cursor
Google launches Gemini Omni 1.2 Flash with native 15-second video, multi-turn conversational editing and a 30% price cut to $0.07 per second for 720p
Sources: Google
Dropbox announces DBX Agent Cloud for S3-compatible object storage aimed at AI apps and agents, and a planned acquisition of Tigris Data; TechCrunch reports the deal at $350 million
Sources: Dropbox, TechCrunch
Short: OpenAI details an agent pipeline that produced 948 Linux local privilege escalation exploits and candidate patches in one mid-October run
Sources: OpenAI
Short: OpenAI introduces GPT-6 Cyber for authorized vulnerability research through Daybreak Red, scoring 48.5% on ExploitGym and finding 81 high-severity Firefox bugs
Sources: OpenAI
The Details
Story 01 / 03
Cursor turns cloud agents into live app builders
- What happened
- Cursor's November 5 changelog says you can build live apps directly in Cursor and share them with a link. Tell a cloud agent you want an app; Cursor scaffolds the web app, spins up a Postgres database if needed, sets up authentication behind Cursor SSO, provisions hosting, and returns a live URL after you pick a domain.
- Why it matters
- Cursor argues that agents lowered the cost of writing code, but most apps never leave localhost. This release aims to take internal tools from a prompt to a shared URL without a separate deploy stack.
- Enterprise impact
- Nothing goes live until deterministic and agentic security checks pass and someone explicitly publishes. Team admins can see every app and secret, add their own review rules, approve blocked publishes and unpublish any app. Sharing can target people, groups or the whole team behind Cursor sign-in; individual plans can also share publicly.
- Startup impact
- Cursor can deploy from new or existing repos on Cursor Origin and GitHub, with GitLab support planned. The feature is available on all paid plans with cloud agents enabled.
- What to focus on
- Whether security review blocks enough real issues, and how often teams publish useful tools versus throwaway demos.
Discuss this story
Comment with your GitHub account. One thread per story.
Story 02 / 03
Google ships Gemini Omni 1.2 Flash for longer, cheaper video
- What happened
- Google DeepMind launched Gemini Omni 1.2 Flash on November 5, making it generally available on the Gemini API and Gemini for business. Clips now run up to 15 seconds (up from 10), with multi-turn conversational editing and stronger reference following. Google cut the price 30% from Omni 1.1 to $0.07 per second for 720p video.
- Why it matters
- Creators can draft at 360p or 720p, fix details with follow-up edits instead of regenerating, then upscale keepers to 1080p or 4K. Duration can be set in one-second steps from 3 to 15 seconds.
- Enterprise impact
- Google says Gemini Omni is generally available with Google Cloud infrastructure, Provisioned Throughput and SynthID watermarking on outputs. Flow, Google Vids, the Gemini app (for Google AI Ultra) and Google Ads are also getting the longer clips.
- Startup impact
- Stronger character, product and style reference adherence targets virtual try-on, catalog spins and branded ads from existing photography.
- What to focus on
- Google still flags sports action, rapid script changes and complex physics as areas under improvement.
Discuss this story
Comment with your GitHub account. One thread per story.
Story 03 / 03
Dropbox launches DBX Agent Cloud and plans to buy Tigris
- What happened
- Dropbox announced on November 5 a new Dropbox experience that brings AI to existing files with model choice, plus DBX Agent Cloud, starting with standalone S3-compatible object storage for AI applications and agents. Dropbox also announced a planned acquisition of Tigris Data Inc. TechCrunch reports the price at $350 million, citing Dropbox; Dropbox's own post does not state a price.
- Why it matters
- Dropbox positions Agent Cloud as storage and data infrastructure for training datasets, model artifacts and agent file access across sessions, meant to sit beside the clouds and compute customers already use.
- Enterprise impact
- Dropbox told TechCrunch the deal is expected to close in the fourth quarter of 2026 and that it has no current plans to cut headcount as part of the acquisition. Tigris was founded by former Uber storage engineers and raised a $25 million Series A last year, per TechCrunch.
- Startup impact
- Dropbox plans filesystem features so agents can manage files across tasks, plus content processing for documents, images, audio and video.
- What to focus on
- Whether Agent Cloud competes as an independent S3 alternative once Tigris closes, and how the AI file features land outside the initial U.S., U.K. and Australia rollout.
Discuss this story
Comment with your GitHub account. One thread per story.
Worth a Glance
OpenAI's Linux exploit pipeline
In "A thousand fewer paths to root," OpenAI says a mid-October agent run reproduced 1,724 Linux kernel vulnerabilities and produced 948 working local privilege escalation exploits plus candidate patches, at an API cost of about $1.2 million.
OpenAI(opens in a new tab)OpenAI GPT-6 Cyber
OpenAI introduces GPT-6 Cyber for authorized security research via Daybreak Red. It scores 48.5% on ExploitGym (up from 32.1% for GPT-5.6 Cyber), found 81 high-severity Firefox bugs Mozilla has begun fixing, and powered the 948 Linux LPE exploits; access starts with a limited Daybreak Red group.
OpenAI(opens in a new tab)
One Thing Not to Miss Today
From localhost to a live link
Cursor is shipping apps from a cloud agent prompt, Google is making longer video cheaper to generate, and Dropbox is building storage aimed at agents that need files across sessions.