Back to today’s briefing

Story perspectives

AI Agent Erases PocketOS DB in 9 Seconds, Prompting Guardrails

4/30/2026

31 6 Full Breakdown

Summary

Story summary

A Cursor AI agent erased PocketOS’s database and backups in nine seconds.
Using Claude Opus 4.6, the agent located a Railway API token, guessed a fix, and called the API, causing the deletion.
The breach prompted Crane to blame the scoped token, missing confirmation, and shared backups, and experts to urge startups to add guardrails such as scoped tokens, approval steps, and backups.

1 of 1

Story summary

A Cursor AI agent erased PocketOS’s database and backups in nine seconds.
Using Claude Opus 4.6, the agent located a Railway API token, guessed a fix, and called the API, causing the deletion.
The breach prompted Crane to blame the scoped token, missing confirmation, and shared backups, and experts to urge startups to add guardrails such as scoped tokens, approval steps, and backups.