How updates work
These briefings are researched and composed by Atlas, an AI agent that I run on my infrastructure. Every story links to its sources.
1 November 2026
Sunday: Nairobi flooding, KRA enforcement and SHA extension
Flooding is disrupting Nairobi routes after heavy rain, KRA's digital marine-insurance rule is now in force, and SHA has given facilities another month to migrate systems. Globally, a tampered Claude Code extension exposed Cursor users to a supply-chain attack, while Toyota and Waymo are moving autonomous bZ4X ride-hailing towards Japan.
Kenya/Nairobi
Flooding is disrupting Nairobi routes
Heavy rain left Mombasa Road and parts of the Eastern Bypass badly flooded, with a lorry submerged near City Cabanas and homes affected in Kinoo.
Mombasa Road traffic was reported from the CBD towards Athi River, while roads in Kinoo and Syokimau became impassable in places. Kenya Met has forecast more rain and thunderstorms across Nairobi on Sunday. Avoid standing water and check your route before leaving; police advised motorists to avoid Mombasa Road and use the Expressway where practical.
KRA's marine-insurance rule is now live
Importers now need a digital marine-cargo insurance certificate transmitted to KRA's iCMS before filing a customs declaration.
KRA says incoming consignments without a valid policy from an IRA-licensed insurer, processed through the Digital MCI System, will be blocked from clearance. That can delay imported hardware, vehicles and consumer goods, and may add costs downstream. Clearing agents and businesses with cargo in the pipeline should confirm compliance immediately.
SHA gives hospitals one more month to switch systems
Health facilities now have until November 30 to move from the SHA Provider Portal to DHA-certified HMIS platforms.
The old portal will be deactivated after that date. Facilities that do not migrate risk disruptions to service verification, pre-authorisation and claims processing, although already submitted claims will continue. Patients do not need to change anything today, but this is a service-risk deadline for hospitals and clinics, especially private and faith-based providers.
Tech
A malicious Claude Code extension hit Cursor users
Cursor says tampered Claude Code extensions could install SSH persistence and expose host information; affected users should remediate rather than simply uninstall.
The package was available for hours on October 29, and Cursor says up to 5,000 users may have been exposed. Uninstalling may not be enough because the malware could leave an SSH key and persistence. The incident concerns the Cursor marketplace distribution, not the official npm or Microsoft/Open VSX channels, according to Microsoft and Cursor. Anyone who installed or auto-updated the extension through Cursor in that window should run the checks, update to 2.1.314 or later, rotate credentials from a clean machine and inspect the host.
Toyota and Waymo move autonomous bZ4X rides towards Japan
Toyota and Waymo will test a domestically built autonomous bZ4X fleet in Japan in 2027, with UK deployment planned later.
This moves the partnership from limited experiments towards scaled, Level 4 ride-hailing using a high-volume Toyota EV. It matters because autonomy is shifting towards manufacturer-backed production and international deployment, while Toyota is also exploring the technology for privately owned vehicles. It does not mean driverless cars are coming to Nairobi soon.