Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

NYT ‘Pips’ Hints, Answers And Walkthrough For Wednesday, July 1

Looking for help with today's New York Times Pips? We'll walk you through today's puzzle and help you match dominoes to tiles.
Decrypt

LongCat-2.0: The Stealth AI Model That Was Quietly Topping OpenRouter All Along

Chinese tech company Meituan officially unveiled LongCat-2.0 on June 30, confirming the open-license, 1.6-trillion-parameter mixture-of-experts AI model is the same system that sp ...

NYT ‘Pips’ Hints, Answers And Walkthrough For Saturday, July 4

Looking for help with today's New York Times Pips? We'll walk you through today's puzzle and help you match dominoes to tiles ...
The Hacker News

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.
The Next Web

An AI agent just ran a full ransomware attack with no human at the keyboard

Sysdig's JadePuffer case is billed as the first ransomware attack planned and executed end to end by an AI agent, with no human directing it.
Tech Times

Compile Once, Run Offline: New AI Method Matches 32B Models With a 23MB File

Local AI inference at 32B-parameter quality, no cloud API required: University of Waterloo researchers released PAW on July 2 ...