Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
Tech Xplore

Dark web survey reveals Tor is smaller, shakier and more duplicated than expected

A study led by researchers from IMDEA Networks and Carlos III University of Madrid (UC3M) has carried out the first ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
The Next Web

The captive portal economy: how hotel WiFi sign-in pages became both a security vector and a hidden ad channel

KeepSolid CEO Vasyl Ivanov explains how hotel WiFi captive portals evolved into both a security vulnerability and a programmatic ad channel, and what VPN clients should do about it.

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private ...

The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...
Science Daily

AI uncovers the hidden genetic control centers driving Alzheimer’s

Scientists have created the most detailed maps yet of how genes control one another inside the brains of people with Alzheimer’s disease. Using a powerful new AI-based system called SIGNET, the team ...

How ChatGPT Actually Picks Sources (I Read The Network Traffic, Not The Outputs)

This study from Suganthan reveals hidden fields in ChatGPT's network traffic that decide which sources get fetched, cited, or ...