Developer Tech

Socket: PyPI and npm payment SDK malware compromises CI/CD

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
Tech Times

Hidden Webpage Instructions Are Making AI Agents Pay Hackers in Live Campaigns

Indirect prompt injection attacks are now draining cryptocurrency from AI agents in production. Zscaler ThreatLabz documented ...
The Hacker News

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...
techtimes

First AI-Agent Ransomware Destroyed Data Even Payment Could Not Recover

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...
The New York Times

NCAA pushes for pause on college sports prediction markets until regulation increases

NCAA president Charlie Baker says they're willing to work with the Commodity Futures Trading Commission to develop a system that protects student-athletes and consumers from harm. Kevin Dietsch / ...