SaaS, herramientas digitales y desarrollo.
An investigation by The Wall Street Journal reveals that millions of connected devices, such as digital frames and streaming players, contain backdoors that allow cybercriminals to use them for launching DDoS attacks, ad fraud, and accessing personal accounts. An estimated tens to 500 million devices are infected.
The Rokarolla malware has been detected attacking over 200 banking and cryptocurrency apps on Android. It uses overlay techniques and accessibility service access to steal credentials. Users are advised to update their system and avoid installing apps outside Google Play.
GitHub has announced significant improvements to Copilot for VS Code: prompt caching and lazy tool search reduce token usage, while the Auto system selects the most suitable model for each task. This brings Copilot closer to a more autonomous and cost-effective AI assistant.
Adobe has launched a redesigned version of its AI studio Firefly, now with persistent context, reusable assets, and organized workflows. The private beta promises to accelerate the transition from ideation to production-ready designs, unifying editing and generation in a single interface.
Anthropic and Vercel have launched a direct integration that lets users send Claude Design creations to Vercel and get a public URL in seconds. Based on the MCP protocol, the feature converts the design into a deployable project, eliminating friction between design and development.
GitHub has released actions/checkout v7 to curb 'pwn request' attacks, which exploit the pull_request_target trigger to run malicious code with elevated privileges. The update, which will be backported to older versions in July, forces developers to explicitly opt into unsafe behaviors.
Adobe has launched a significant update to its creative agents, adding new Firefly capabilities and agentic functions across several Creative Cloud applications. This move aims to automate complex workflows and democratize content creation.
Meta launches Pyrefly 1.0, an ultra-fast linter; Python 3.15 includes a sampling profiler; a comprehensive guide to virtual environments is published; and Hades, malware that hides in packages and tricks AI assistants, is discovered.
Platforms like Threads, Instagram, and TikTok are introducing tools that let users directly influence recommendation algorithms. This move responds to growing demands for transparency and control, and could redefine the dynamic between platforms, creators, and audiences.
Python 3.14 introduces an experimental JIT compiler that optimizes loops and numeric operations, offering performance improvements of up to 30% in benchmarks. However, the JIT is disabled by default and its impact on real-world applications remains to be evaluated.
A security researcher has hacked a smart bulb to turn it into a 'library of banned books' accessible via Wi-Fi. The project, based on an ESP32, demonstrates how everyday technology can be repurposed for digital dissent and cultural preservation.
LinkedIn launches Connected Apps, a feature that connects user profiles with software applications they actually use, generating non-editable automatic descriptions based on activity data. This promises to end skill inflation on resumes but raises questions about privacy and control.