The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source ...

How ChatGPT Actually Picks Sources (I Read The Network Traffic, Not The Outputs)

This study from Suganthan reveals hidden fields in ChatGPT's network traffic that decide which sources get fetched, cited, or ...
Mactrast

Apple Releases Safari Technology Preview 247 – Adds MCP Server for AI Agent Integration

Apple has released Safari Technology Preview 247, the latest version of its developer preview web browser. The preview ...

I let Claude audit my messy Home Assistant setup, and it was a massive wake-up call

I gave Claude access to my Home Assistant. It helped me audit, debug, and improve my smart home better than I ever could have.

Im Test: Elixirs 1.20 neues intelligentes Typsystem

Das Typsystem von Elixir 1.20 analysiert jedes Sprachkonstrukt, erkennt fehlerhafte Argumente und verfolgt sie auch.
Elektor Magazine

Wi-Fi-Based Person Detection on an ESP32: When Your Router Becomes a Motion Sensor

Can an ESP32 detect people without cameras or motion sensors? Discover how Wi-Fi signal disturbances, CSI, and smart DSP enable real-time occupancy and mov ...