#scrum #scrumteam #dev #developer #coding #programming #programminghumor #codinghumor #programmer_humor #programmer #AI #aicoding #aicodingtools #aicodegeneration #AIhumor #Meme #memes #Humor #humour
#aicodingtools
It's been a busy 24 hours in the cyber world with significant updates on a critical RCE vulnerability under active exploitation, novel attack techniques leveraging AI and web standards, and a timely reminder about evolving authentication best practices. Let's dive in:
AI-Powered Virtual Kidnapping Scams on the Rise 🚨
- Criminals are now leveraging social media images and AI tools to create convincing fake "proof of life" photos and videos for "virtual kidnapping" and extortion scams.
- These sophisticated social engineering attacks pressure victims with threats of violence, demanding immediate ransom payments, echoing the old "grandparent scam" but with a modern, AI-enhanced twist.
- The FBI advises extreme caution: never provide personal info to strangers, establish a family code word, and always attempt to contact the supposed victim directly before making any payments.
🕵🏼 The Register | https://go.theregister.com/feed/www.theregister.com/2025/12/05/virtual_kidnapping_scam/
React2Shell RCE Under Widespread Exploitation ⚠️
- The critical React2Shell vulnerability (CVE-2025-55182), an unauthenticated RCE flaw in React Server Components, is under active and widespread exploitation by various threat actors, including China-linked state groups like Earth Lamia, Jackpot Panda, and UNC5174.
- CISA has added CVE-2025-55182 to its Known Exploited Vulnerabilities (KEV) catalog, with over 77,000 internet-exposed IP addresses identified as vulnerable and more than 30 organisations already compromised.
- Post-exploitation activities include reconnaissance, credential theft (especially AWS config files), deployment of webshells, cryptojackers, and malware like Snowlight and Vshell. Cloudflare even experienced an outage while deploying mitigations.
🕵🏼 The Register | https://go.theregister.com/feed/www.theregister.com/2025/12/05/react2shell_pocs_exploitation/
🤫 CyberScoop | https://cyberscoop.com/attackers-exploit-react-server-vulnerability/
📰 The Hacker News | https://thehackernews.com/2025/12/critical-react2shell-flaw-added-to-cisa.html
🤖 Bleeping Computer | https://www.bleepingcomputer.com/news/security/react2shell-flaw-exploited-to-breach-30-orgs-77k-ip-addresses-vulnerable/
IDEsaster: 30+ Flaws in AI Coding Tools 🛡️
- New research, dubbed "IDEsaster," has uncovered over 30 vulnerabilities in popular AI-powered Integrated Development Environments (IDEs) like Cursor, GitHub Copilot, and Zed.dev.
- These flaws chain prompt injection with legitimate IDE features, allowing attackers to bypass LLM guardrails and achieve data exfiltration or remote code execution without user interaction.
- The findings highlight a critical need for a "Secure for AI" paradigm, urging developers to apply least privilege to LLM tools, minimise prompt injection vectors, and implement sandboxing for commands.
📰 The Hacker News | https://thehackernews.com/2025/12/researchers-uncover-30-flaws-in-ai.html
Novel Clickjacking via CSS and SVG 🎨
- A security researcher has developed a new clickjacking technique that leverages SVG filters and CSS to leak cross-origin information, effectively bypassing the web's same-origin policy.
- This method allows for complex logic gates to process webpage pixels, enabling sophisticated attacks like exfiltrating Google Docs text, even in scenarios where traditional framing mitigations are absent or ineffective.
- While Google awarded a bounty for the report, the vulnerability remains unpatched across multiple browsers, underscoring the ongoing challenge of securing complex web standards.
🕵🏼 The Register | https://go.theregister.com/feed/www.theregister.com/2025/12/05/css_svg_clickjacking/
Passkeys: The Future of Phishing-Resistant MFA 🔒
- Traditional SMS and email one-time passwords (OTPs) are increasingly vulnerable to phishing attacks, making them an unreliable form of multi-factor authentication (MFA).
- Passkeys, based on cryptographic key pairs and FIDO2 standards, represent the "gold standard" for phishing-resistant MFA, offering superior security and a significantly improved user experience with faster logins and reduced helpdesk calls.
- While multi-device passkeys can still be susceptible to social engineering (like Scattered Spider attacks), they remain a substantial upgrade from OTPs, with over 2 billion passkeys already in use and strong adoption expected to continue.
🕵🏼 The Register | https://go.theregister.com/feed/www.theregister.com/2025/12/06/multifactor_authentication_passkeys/
#CyberSecurity #ThreatIntelligence #Vulnerability #RCE #React2Shell #CVE_2025_55182 #NationState #APT #Clickjacking #SVG #CSS #AICodingTools #IDEsaster #PromptInjection #MFA #Passkeys #Phishing #SocialEngineering #InfoSec #CyberAttack #IncidentResponse
Amazon hopes to jump-start its AI coding tool Kiro by giving it away to startups
#scrum #scrumteam #dev #developer #coding #programming #programminghumor #codinghumor #vibecoding #aicoding #aicodingtools #aicodegeneration #AIhumor #Meme #memes #Humor #humour
#scrum #scrumteam #dev #developer #coding #programming #aicoding #aicodingtools #aicodegeneration #programminghumor #codinghumor #vibecoding #memes #Meme #Humor #humour
Anthropic brings Claude Code to the web
https://fed.brid.gy/r/https://techcrunch.com/2025/10/20/anthropic-brings-claude-code-to-the-web/
Unlock 10× Productivity — Build AI Agents Without Coding!
Turn your ideas into action with no-code AI agent development. Whether you're an entrepreneur, startup, or tech innovator, discover how AI automation, machine learning chatbot tools, and drag-and-drop AI builders can revolutionize your workflow and supercharge productivity.
Read the full guide 👉 https://droidt99.com/read-blog/32010_unlock-10x-productivity-build-ai-agents-without-coding.html
#NoCodeAI #AI #SmartAgents #AICodingTools #AIAgentBuilder #NoCodePlatform #AIinBusiness #NoCodeagent #AIautomation
Good news, everyone! #AIcodingtools no longer hinder #softwaredelivery throughput according to #Google #DORA's latest report. The bad news? Click to find out... #DevOps #GenAI #AI https://www.techtarget.com/searchsoftwarequality/news/366631712/Google-DORA-Software-delivery-caught-up-to-AI-coding-tools
Công cụ AI hỗ trợ code giúp tăng tốc độ, nhưng có thể làm phình to codebase! 🤯 Một lập trình viên nhận thấy code trở nên nặng nề hơn, nhiều đoạn code bị trùng lặp, thiếu tính module sau khi sử dụng các công cụ như Cursor, Claude, Copilot. Refactor một feature do AI tạo ra giúp giảm từ 300 dòng xuống còn 70 dòng. Liệu đây là vấn đề không thể tránh khỏi khi dùng AI coding tools? 🤔
#AI #coding #laptrinh #trituenhantao #AIcodingtools #codebloat
#scrum #scrumteam #dev #developer #leadership #executives #AI #aicodingtools #aicoding #Meme #memes #Humor #humour
As promised (warned), here is part 2.
#scrum #scrumteam #AI #aicodingtools #aicoding #stockbuyback #stockbuybacks #executives #leadership #layoffs #memes #Meme #Humor #humour
Writing code just got quicker.
These AI assistants help you debug, suggest snippets, and speed through development — ideal for beginners and pros alike.
Read more:
#aimartz #aimartz.com #AICodingTools #CodeAssistants #DeveloperAI
Study finds AI tools made open source software developers 19 percent slower https://arstechni.ca/FgSG #AIcodingtools #AIcoding #AItools #AI
AI coding tools make developers slower but they think they're faster study finds
https://www.theregister.com/2025/07/11/ai_code_tools_slow_down/
#HackerNews #AIcodingTools #Developers #Slower #Study #Findings #TechNews #SoftwareDevelopment
AI coding tools are like that helpful but untrustworthy friend, devs say
https://www.theregister.com/2025/06/12/devs_mostly_welcome_ai_coding/
#HackerNews #AIcodingTools #helpfulFriend #devs #say #untrustworthy #technology #news
Discover how AI tools for code completion are transforming software development and boosting productivity.
#AICodingTools #SoftwareDevelopment #TechEfficiency https://zurl.co/wh4gx
#scrum #scrumteam #dev #developer #AI #artificialintelligence #aicoding #aicodingtools #leadership #executives #memes #Meme #Humor
Observations about using #AI to help you write code - I am not a programmer, and I am old and my memory isn't what it used to be (and honestly it was never great - whatever the opposite of a photographic memory is, that's about what I have). But, on rare occasions I need a short program to do some specific task. #Python (specifically #python3 ) seems to be what everyone uses these days, but I never learned Python - the only languages I ever even partially learned were BASIC and Z-80 assembly language (that should tell you about how old I am!).
So in days past if I needed a short program I'd either try to write it as a #bash script (which is a little bit similar to BASIC) or if I felt I had to do it in Python, it would take me hours because I'd literally need to do multiple web searches to figure out the correct Python code for each step, and none of my code was really efficient because I don't know nor understand any of the advanced features of Python (what the hell's a "tuple", anyway?!). And also, Python is kind of a miserable language to work with because it is so picky about things like indentation and syntax. I realize if you write a lot of Python code you can use an #IDE to help you with things like that, but for the two or three times a year I need a script to do something, the learning curve for the IDE would be more effort than it's worth.
But now we have AI, and I find that trying to use it to help write code can be a very, um, interesting experience. For one thing, unlike some web sites which shall remain nameless, it never makes you feel like an idiot or chides you for not having searched hard enough before you asked a question, unlike some of the bullies and a-holes that inhabit those "question and answer" sites.
And AI is great for people like me who have lousy memories, because it remembers the basics of a language, and also a lot of the little tricks that can help make your code more efficient. It suggests things I would have never known nor remembered. It also comments much of the code it creates, so you can actually understand what it is doing (and you can ask it to explain why it used certain statements, so it really is kind of a learning experience).
But at the same time it makes really dumb mistakes, such as mis-matching parenthesis (a no-no in any language). Sometimes the mistakes are obvious, in other cases if you tell it what the problem was (the error message you received, or why the result was not as expected) it will fix the error, though that may take a few tries (and it may even repeat previously given incorrect code, which is frustrating). But what I find interesting is that it often gets the hard parts right, but totally fumbles the easy stuff.
But here are my questions: If you find an obvious error, and you tell the AI about it, does it learn from its mistake, or will is spit out the same bad code to the next person who gives it similar input? And also, is there a particular #aimodel that is great for generating code (especially Python code)?
Client Info
Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst