Everyone running coding agents is now rationing them, and the first hard limits are landing on engineers.

Today's headline

Everyone running coding agents is now rationing them. SpaceX cut Grok Bot limits because serving it cost too much. Cognition added budgets that stop a Devin session mid-task. Goldman Sachs pulled coding tools from everyone but its engineers. And Anthropic's new filing shows why vendors are tightening: costs in the third quarter beat revenue.

On the clock

Next Monday, November ninth, GitHub runs the first of two brownouts for a change to Actions. From December second, public repositories block the pull request target trigger by default. That date moved from November second. The second brownout is on the sixteenth. During each two-hour window, blocked runs fail. Check the Insights view now for workflows the rule would stop.

Wednesday, Apple starts its China beta, running on Alibaba's Qwen. And Moonshot has promised open weights for Kimi K three point one Pro. Line up an eval if you self-host.

Security

First, Linux. The kernel TCP flaw we flagged last week is now fixed on Red Hat. It is critical, with a score of nine point eight. Red Hat shipped kernels for versions eight, nine and ten on Sunday, and you need a reboot. Ubuntu's fixes are only in its opt-in testing channel, with no date for the regular one. Ubuntu twenty point oh four and older have nothing. An attacker needs no login. Patch Red Hat hosts now. On Ubuntu, install from the testing channel on anything internet-facing, or use Red Hat's firewall rule as a partial stop.

Next, Node-RED. A missing-authentication bug scores a perfect ten, and attackers are using it. VulnCheck saw a Linux bot delivered on October thirtieth, then fifteen more attacks from one address by November first, including backdoors. The flaw runs commands as root. Siemens fixed it in its IoT two oh five oh devices. Take Node-RED off the internet, or upgrade.

Third, Nvidia's Brev platform. Customers were told that unauthorized activity ran from October fourth to the twentieth, and that the SSH keys Brev uses to reach customer machines may have been exposed. Nvidia rotated the keys and found no evidence of misuse. It did not say how the attackers got in. There is no CVE, so scanners will be silent. Audit login history on those machines for the sixteen days.

And Google's threat team on stolen AI access. Criminals who break into cloud accounts run models at the victim's expense. Some bills passed one hundred thousand dollars in a single day. The worst reached one million. Resellers sell the access for about sixty dollars a month. Unlike cryptojacking, the damage arrives within hours, not weeks. Set spend alerts, and rotate any exposed keys.

Agents

A new report finds coding agents installing MCP servers that will never be patched. In almost every case, the agent filled in the package name from its training data. Four high-severity flaws have no patch and no CVE. One lets a prompt injection run any command through the Puppeteer server. Your scanners will not see these, because they run through npx. Pin your MCP servers to maintained packages.

Cognition added hierarchical budgets to Devin. Admins set budgets by department, project and engineer, and can approve more capacity. When a budget runs out mid-task, the session stops. Cognition says its old org limits and per-user tiers stopped working once deployments grew past pilots. Decide now who gets the override.

Anthropic's Message Threads is in public beta. It sends only what changed since the last message. Anthropic says that cuts time to first token by thirty-five percent on very long conversations. Token usage does not change.

OpenAI detailed Pando, a new Git backend for its monorepo. Commits will be up over twenty-four hundred percent on early twenty twenty-four by year-end, and reliability had fallen below ninety percent. OpenAI says push latency dropped nearly five times. It kept Git for compatibility. These figures are the company's.

Uber described its MCP gateway, covering more than eight hundred servers. A registry controls which tools are switched on. That central control is the part worth copying.

Models and pricing

SpaceX throttled Grok Bot usage limits over Halloween weekend. Some users went from half their weekly limit to all of it overnight. Musk said serving costs were unsustainably high. That is the same product that SpaceX credits for a profitable AI division.

Alibaba Cloud launched a long-term memory service for personal agents. The benchmark wins are Alibaba's own numbers, and they have not been independently reproduced.

Business and policy

Anthropic's amended filing shows third-quarter revenue near seventeen billion dollars. Growth slowed to forty-seven percent over the second quarter. Operating costs of seventeen and a half billion beat revenue, and the net loss was twenty-three billion. Compute commitments total eight hundred ninety-five billion. The same filing says Anthropic is approaching what the field calls recursive self-improvement, and cites its safety policy for monitoring it.

Nvidia has reportedly told cloud operators to keep Chinese customers below forty-nine percent of new business. The Financial Times says sales teams passed it on verbally, and Nvidia has not confirmed the number.

Salesforce is reportedly paying two point seven billion dollars for Cresta, a contact-center AI company. Salesforce has not disclosed terms.

The New York Times sued Brave. It alleges Brave sold scraped content to AI companies, including Anthropic and Perplexity. These are allegations, and Brave has not responded.

Goldman Sachs limited Claude Code and Copilot to engineers, citing productivity and risk. OpenAI also raised its top bug bounty to one hundred seventy-two thousand dollars. Google added a two hundred fifty thousand dollar tier.

Action items

Patch Red Hat kernels now and reboot. Install Ubuntu fixes from the testing channel on exposed hosts. Take Node-RED off the internet, or upgrade. Run the Insights check before November ninth. Set spend alerts on cloud AI keys and rotate anything exposed. Pin your MCP servers to maintained packages.

Before you go

Open your Linux fleet list first. A critical flaw with no login needed is fixed on Red Hat and still waiting on Ubuntu, so your exposure depends on which distribution each host runs. After that, check your Actions workflows before Monday, and the rest will keep.