GCN

Typing one install command has run strangers’ code on developer machines for over a decade, but the tool’s new version blocks that step by default

npm 12 now blocks install scripts by default, closing the lifecycle hook that fueled major supply chain attacks on developer ...
ABC News on MSN

A 'code red' for cybersecurity? How to prepare for a possible wave of AI hacking

Here are some tips to help try to protect your information.

Oxide Shows How to Run Self-Hosted AI Agents on the Oxide Cloud Computer

Examples for Claude Code self-hosted environments and Amp self-hosted orbs run each AI agent session in its own ...
The Hacker News

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

OpenAI fixed a P1 ChatGPT flaw that let malicious shared links execute code in signed-in sessions and access private ...
2-Spyware

Device code phishing: what it is, how to spot it and what to do if you entered a code

Device code phishing tricks you into approving an attacker's Microsoft sign-in with a short code. See how it works, how to ...