Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Deno project is going to add cross-platform desktop apps in next major update

The next major release of Deno, a JavaScript/TypeScript runtime, will include new commands to build cross-platform desktop ...
The Hacker News

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Researchers found 15 malicious JetBrains plugins posing as AI coding tools that exfiltrate OpenAI, DeepSeek, and SiliconFlow ...
The Next Web

Google is about to disable uBlock Origin and every other Manifest V2 extension in Chrome

Chrome 150 will remove the last override keeping Manifest V2 extensions alive. uBlock Origin and other content blockers will stop working by late June.
GitHub

Notiflix is a dependency-free, secure, and lightweight JavaScript library built with pure JavaScript, offering client-side non-blocking notifications, popup boxes, loading ...

It is designed to enhance the user experience without the need for heavy dependencies, making it suitable for a wide variety of projects. Notiflix Notify module can be used to send non-blocking alerts ...
The Verge

Strava blames zero-code AI apps and scrapers as it tightens API access

Developers will now have to pay a $11.99 / month subscription to build apps using Strava’s data. Developers will now have to pay a $11.99 / month subscription to build apps using Strava’s data. is a ...