Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

The 5 job archetypes of the future, according to Claude Code's creator

Claude Code creator Boris Cherny wrote about "what roles might look like in the future," from the "builder" to the "sweeper" ...

OpenAI's head of Codex says AI still can't get creative design right: 'Give it up for the human brain'

AI is revolutionizing all kinds of industries, but there are some things it still can't quite get right, and, by most accounts, design is one of them.
XDA Developers on MSN

I built repeatable agentic AI workflows that code without me, and the results surprised me

All my agents needed was a little bit of codified workflows to follow ...

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Figma now has AI motion graphics and shader tools

Work directly with code on the Figma Design canvas. Clone repositories, generate new directions with Figma’s agent, extr ...
XDA Developers on MSN

I used Meta Llama 4, Qwen 3-Coder and Gemma 4 to develop a Python app, and only one model is worth keeping for developers

Putting some of the best local models to the development test ...
CSO Online

Google’s Vertex AI SDK could allow RCE through bucket squatting

Google reportedly patched a flaw in the Vertex AI SDK for Python that could allow attackers to hijack model uploads and ...