Hackers can use 9 of the most popular AI tools to assemble massive botnets

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
Entrepreneur

The Man Behind Anthropic’s Claude Code Hasn’t Written a Line of Code in 8 Months — Here’s What He Does Instead

Boris Cherny is the creator of Anthropic’s Claude Code tool, which writes code on behalf of developers based on a text prompt. Cherny hasn’t handwritten code in eight months; instead, he manages ...
New York Post

Baby treated for rare epilepsy syndrome after doctors inject missing gene directly into his brain

An eight-month-old infant with rare but severe epilepsy has received an experimental gene replacement in a historic medical moment. The child was one of the first in the world to be treated with gene ...
Fast Company

Anthropic’s IPO march began with a Claude Code breakthrough

Developers had been using Claude Code to build software for much of 2025, but the tool had shown more promise than truly game-changing results. Opus 4.5 gave Claude Code the intelligence to build an ...
Neowin

People are using prompt injection to trick Meta's AI into handing over Instagram accounts

Reports have started circulating of a security flaw where hackers are tricking the Meta AI support assistant on Instagram into handing over user accounts without authorization (even with 2FA enabled).
Ars Technica

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code

The controversy over vibe coding reached a new high this week after a developer added hidden instructions to his open source Java testing app to sabotage projects performed by AI coding agents. The ...
WeLiveSecurity

BTMOB: A stealthy RAT burrowing deep into Android devices

Our recent review of threat detections in Brazil surfaced BTMOB, an Android remote access trojan (RAT) that is less notable for detection volume than for the damage it can wreak. The combination of ...
Bleeping Computer

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...
ExtremeTech

Google's AI Studio Can Now Vibe Code Custom Native Android Apps

Google's AI Studio now lets users build native Android apps within minutes, all from their web browser—no Android Studio required. The company announced the update at this week's Google I/O 2026, and ...
The Verge

Google can now vibe-code you an Android app

But Google is carefully suggesting that the apps might be best as more limited experiences. But Google is carefully suggesting that the apps might be best as more limited experiences. is a senior ...