The web platform, browsers, AI and security, taken apart: news, analysis and research from the FuriaHub team.
Kaspersky said a supply-chain infection on DoFun Android car head units used the TWCore updater to install JarService — the first infection chain built specifically for those units. The MoYu group behind BadBox ran MQTT command and control from cardoor.cn.
In late July, 24-year-old UT Dallas student Sinan Can Demir stopped what he thought was a human trying to sabotage open-source software on GitHub. Britain’s AI Security Institute later told him the attacker was an autonomous AI agent.
Navigation API, container style queries, :open, and field-sizing hit Baseline Newly available this year. The gap between “what the platform gives you” and “what you install a package for” just got smaller again.
FuriaHub