Researchers found threat actors uploading npm packages containing only a malicious HTML file disguised as a Cloudflare verification page. When mirrored by sites like UNPKG and npmmirror, these files become directly viewable in a browser under a trusted domain, redirecting victims to attacker-controlled sites. OX Security identified 24 such packages, following an earlier discovery in July involving a package called 'china_airlines'.
Coco Robotics, founded in 2020 by two UCLA engineers, built small autonomous delivery vehicles to replace full-size cars for short restaurant delivery trips. The company says it now completes about 1,000 deliveries a day in Los Angeles and has surpassed 500,000 total deliveries across more than a million miles, with a Shake Shack regional manager singling out the robots as a standout courier.
Waymo announced plans to bring its driverless ride-hailing service to Munich, months after establishing a German entity. The company will first manually map the city's streets, then test vehicles with safety drivers before removing them, following the same rollout process used in its 11 other operating cities. Waymo is coordinating with Germany's Federal Motor Transport Authority and local officials, targeting public commercial service by the end of 2027.
Apple unveiled the M6 chip alongside new Mac mini and Mac Studio models, marking the debut of a chip family that will later include the iPhone 18 Pro's A20 Pro. Apple says M6 uses a 2-nanometer manufacturing process and a redesigned 12-core CPU layout, delivering major gains in speed and power efficiency along with a doubled Neural Engine for on-device AI tasks.
Waymo announced plans to begin phased testing of its robotaxis in Munich in the coming weeks, aiming for a public launch by the end of 2027. The Google-owned company will use the testing period to map the city's streets, train safety specialists and adjust its software for local driving conditions. This marks Waymo's third international city after London and Tokyo, both still in testing phases.
Once a near-guarantee for any blockbuster, licensed movie video games have dwindled from over 30 releases in 2007 to almost none in 2025, replaced instead by in-game tie-ins like Minecraft movie servers or Fortnite skins for The Fantastic Four: First Steps. Recent releases such as the remastered Lord of the Rings: War in the North and the upcoming Toy Story compilations have reignited interest in this fading genre.
Clara, a Y Combinator P26 company building an AI-driven primary care service, is hiring a growth engineer to own its entire patient acquisition and retention funnel. The role spans landing pages, SEO and paid channels, onboarding, experimentation, and lifecycle messaging, with the hire expected to code, ship, and analyze results directly. The position also requires close coordination with clinical and compliance teams to ensure marketing claims and experiments meet medical accuracy and HIPAA requirements.
OWASP GenAI Security Project leaders Kyriakos Lambros and Steve Wilson published an analysis comparing expert rankings of LLM security threats against 6,639 real-world incidents pulled from CVE, GitHub advisories, OSV and the AIAAIC database. Prompt injection tops the OWASP expert list for three straight years but ranks only 12th in the incident data, and statistical testing found no reliable agreement between the two rankings.
A developer detailed a step-by-step process for running a personal website on OpenBSD hosted on DigitalOcean, using the platform's custom image upload feature to install OpenBSD's miniroot image and configuring the server with httpd and Let's Encrypt for HTTPS. The setup costs about $4.24 per month after tax, positioned as an alternative to free static hosting services like GitHub Pages or Cloudflare Pages.
A team led by associate professor Lahiru Jayakody at Southern Illinois University Carbondale has engineered yeast strains that break down PET plastic bottles combined with agricultural waste like corn stalks into a protein-rich, vanilla-flavored snack called µBites. The project grew out of NASA's Deep Space Food Challenge, and though it did not win the competition, NASA encouraged the team to keep refining the concept, leading to improved taste, aroma and color unveiled recently at the American Chemical Society Expo in Chicago.
Twitter/X front-end alternatives Nitter and XCancel have reportedly received cease-and-desist notices, and all publicly available Nitter instances have stopped functioning. The Nitter GitHub repository itself has been archived by its owner, making it read-only and effectively ending active development.
A new Entrepreneur contributor piece argues that YouTube channels typically fail not from a lack of content ideas but from unrealistic workflows that don't account for the true time investment required. The article identifies video editing, optimizing for YouTube's search algorithm, and interpreting analytics as the three biggest time drains for creators. It recommends automating repetitive tasks, batching work, and outsourcing to professionals as ways to reclaim hours lost to these processes.
GoKawiil