Company
Company providing self-hosted, cloud-based developer workspace infrastructure that lets enterprises provision remote development environments via code.
Agent Relay keeps Cursor's reasoning loop in Cursor's cloud and lands the tool calls in workspaces you already govern, which turns the security review's question from whether the agent is allowed into what its planner gets sent.
Reality
Coder says an unidentified actor reached its Cloudflare infrastructure and pointed part of registry.coder.com at servers it controlled. Because those servers are unreachable, nobody can enumerate who downloaded what.
Reality
RuntimeWire's static analysis of the September 18 Claude Desktop build found a selfHostedUrl field and code that sends two Code API paths to an organization's HTTPS host, with the schema itself saying only internal builds act on the value.
Reality
The escape route was a misconfiguration that gave models with no internet access one anyway. A post on Coder's blog places that failure in the layer the customer configures, meaning repos, systems and credentials.
Reality
The nine flaws Microsoft fixed in Entra ID, Cosmos DB and six other services never reached a patch queue. The week's real remediation cost sat instead with 21,000 exposed Exchange servers and one Minnesota county.
Reality