The Hacker News

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

Six Proto6 flaws in protobuf.js enable RCE and DoS attacks; patched in versions 7.5.6 and 8.0.2 to protect Node.js services.
InfoQ

Next.js 16.2: 400% Faster Dev Startup, Faster Rendering, and Deeper Tooling for AI Agents

Vercel has released Next.js 16.2, featuring performance enhancements that make development startup 400% faster and rendering ...
Microsoft

Malicious npm packages abuse dependency confusion to profile developer environments

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...
techtimes

Google Quick Share Adds Easy Android-to-iPhone File Transfers With QR Codes

Google is introducing a major update to Quick Share on Android, making it easier for users to transfer files directly to iPhones and other iOS devices. The company officially revealed the new QR ...
Bleeping Computer

Critical flaw in Protobuf library enables JavaScript code execution

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google's Protocol Buffers. The tool is highly ...
winbuzzer.com

VS Code 1.116 Ships Built-in Copilot, Agent Debug Tools

Microsoft is shipping GitHub Copilot as a built-in VS Code extension starting with version 1.116, eliminating the manual install step that separated new users from AI coding assistance. Published on ...
techtimes

What Is Cursor AI? AI Code Completion & Chat Debugging Development Assistant

Cursor AI Coding is reshaping how developers build software by combining a GPT-powered IDE with intelligent automation. Instead of switching between tools, developers can rely on a single AI coding ...
Los Angeles Times

Anthropic accidentally leaked thousands of lines of code

Anthropic inadvertently released internal source code behind its popular artificial-intelligence-powered Claude coding assistant, raising questions about the security of an AI model developer that has ...
Bloomberg L.P.

Anthropic Accidentally Exposes System Behind Claude Code

Anthropic PBC inadvertently released internal source code behind its popular artificial intelligence-powered Claude coding assistant, raising questions about the security of an AI model developer that ...
CNBC

Anthropic leaks part of Claude Code's internal source code

Anthropic accidentally leaked part of the internal source code for its coding assistant Claude Code, according to a spokesperson. The leak could help give software developers, and Anthropic's ...
Bleeping Computer

Claude Code source code accidentally leaked in NPM package

Anthropic says it accidentally leaked the source code for Claude Code, which is closed source, but the company says no customer data or credentials were exposed. While Anthropic pledges support to the ...