Research Shows How Self-Driving AI Can Be Hijacked With Nothing But Ink and Paper

In one test, a simulated self-driving car disregarded an active crosswalk because of a sign labeled "Proceed." ...
CoinDesk

IoTeX offers cross-bridge hackers 10% bounty if they return $4.4 million within 48 hours

A private key compromise drained millions from IoTeX’s ioTube bridge, with analysts disputing total losses and warning recovery via THORChain may prove difficult.
China Digital Times

Chai Jing

Chai Jing is the impassioned journalist known for her viral self-funded documentary on air pollution, "Under the Dome" (Qióngdǐng zhīxià 穹顶之下). Co-released online in February 2015 by Youku and ...

Zaza Cuban Comfort Food invests $1.5M in flagship restaurant. Here's when it will open.

The Cuban comfort food chain is transforming a former pizza restaurant space near a major employer into its largest location ...

Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
InfoWorld

New npm worm hits CI pipelines and AI coding tools

Researchers warn malicious packages can harvest secrets, weaponize CI systems, and spread across projects while carrying a dormant wipe mechanism.
The Hacker News

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...