Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
India West

DHS Unveils Site To Help Schools Detect Foreign Student Visa Fraud

WASHINGTON, DC-The Department of Homeland Security has launched a new training website aimed at helping U.S. schools identify and prevent student visa fraud, according to the Student and Exchange ...