The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

AI.cc Now Supports 500+ Hugging Face Open-Source Models via Unified API

SINGAPORE, SINGAPORE, SINGAPORE, July 3, 2026 /EINPresswire.com/ -- PRESS RELEASE FOR IMMEDIATE RELEASE Date: May 30, ...
The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
Dark Reading

Chinese LLMs Broaden the Gap Between Attackers & Defenders

Two new models from Chinese firms compete with top US mainstream and frontier models. Should cyber-defenders be worried?

用美国豆包做了个app，停不下来了!

AI 的时代，时间真的过得飞快—— 指挥大语言模型编程的「vibe coding」仿佛就兴起于昨天，实际上它被《柯林斯英语词典》评为年度词汇都过去半年多了。 图｜Cycode 只是在 AI 遍地之后，「用 AI 写程序」逐渐不是那么让人兴奋了，和养龙虾一起变成了那些「AI 极客」们日常生活的一部分。 但在今年的 Google I/O 和 WWDC ...