Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private data.

Android 17 makes it harder for bad actors to guess and crack the PIN on your phone

Android 17 adds tougher lock-screen protections that limit failed PIN and password attempts, extend lockout timers, detect duplicate guesses, and make brute-force attacks harder ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.