OpenAI’s Codex just moved into Chrome, where the useful work and the risks live

OpenAI’s Codex Chrome extension pushes the coding agent into signed-in browser work, making it more useful for real tasks while raising new questions about access, approvals, and agentic AI risk.
InfoWorld

13 new critical holes in JavaScript sandbox allow execution of arbitrary code

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...
The Hacker News

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
havasunews.com

Kidnapping suspect attempts to fire lawyer in objection to psychiatric assessment

A Lake Havasu City man could face decades in prison as he awaits trial on accusations of kidnapping and sexual conduct with a minor - and now his lawyer is ...
The Hacker News

SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Road & Track

Code Breaker: Meet the Man Who Cracked the C8 Corvette's Encrypted Brain

A budding interest in tuning his own car meshed perfectly with Geglia’s background in computer programming. Vince Geglia II’s break came via the Chevrolet Cobalt. Not the Cobalt SS, but the base ...
IEEE

Physical layer encryption of OFDM-PON based on quantum noise stream cipher with polar code

Abstract: Orthogonal frequency division multiplexing passive optical network (OFDM-PON) has superior anti-dispersion property to operate in the C-band of fiber for increased optical power budget.
Bleeping Computer

AppsFlyer Web SDK hijacked to spread crypto-stealing JavaScript code

The AppsFlyer Web SDK was temporarily hijacked this week with malicious code used to steal cryptocurrency in a supply-chain attack. The payload can intercept cryptocurrency wallet addresses entered on ...
ZDNet

This new Claude Code Review tool uses AI agents to check your pull requests for bugs - here's how

Anthropic launches AI agents to review developer pull requests. Internal tests tripled meaningful code review feedback. Automated reviews may catch critical bugs humans miss. Anthropic today announced ...
New Scientist

End-to-end encryption: Best ideas of the century

We all keep secrets. Whether you are trying to protect messages to loved ones, company accounts or vital state intelligence, the technology that allows you peace of mind in our increasingly online ...
Search Engine Roundtable

Google JavaScript Doc Now Says Non-200 HTTP Status Code Might Not Be Rendered

Google updated its JavaScript SEO documentation for the third time this week, this time to say that "while pages with a 200 HTTP status code are sent to rendering, this might not be the case for pages ...
Search Engine Land

Google explains JavaScript execution on non-200 HTTP status codes

Here is the section that was updated: Google explained, “While pages with a 200 HTTP status code are sent to rendering, this might not be the case for pages with a non-200 HTTP status code.” Other ...