Holy sht.. Hackers are going to love this.
Someone open sourced an all-in-one hacking toolkit that bundles every major pentesting tool into a Single CLI menu.
You install it once and get instant access to tools across every category from anonymity, info gathering, wireless attacks, password cracking, web scanning, exploit frameworks, payload GENERATION, and more.
It's called HackingTool.
→ One menu launches Tor, Anonsurf, Macchanger, and proxy chains in seconds
→ Bundles Nmap, Dracnmap, RED HAWK, and ReconSpider for full network recon
→ Ships SQLMap, XSStrike, WPScan, and SecretFinder for web exploitation
→ Includes John the Ripper, Hashbuster, and BruteX for password attacks
51K stars. Runs on any Linux distro.
100% open source.
Starlink V3 satellites have >10X bandwidth of V2 and there’ll be >10X launched, which means >100X more bandwidth.
Also, altitude will be 350km vs 550km, so min latency can be cut in half.
Light travels 300km/ms in space, so physics round trip min latency drops to <5ms.
⚠️ New "IronWorm" supply-chain attack: 30+ npm packages from @ asteroiddao shipped a malicious Rust binary firing on preinstall.
It sweeps 86 env vars + 20 credential files (AWS, GCP, Vault, npm, plus AI keys like Anthropic & OpenAI), hits Exodus wallets, hides behind an eBPF rootkit, and beacons over Tor. Self-propagates via npm Trusted Publishing OIDC, with backdated commits faked as claude/dependabot/renovate.
Anthropic's in trouble, again!
They spent years building what's now fully open-source.
What made Claude feel different from a normal app is that the agent could act inside the interface instead of only talking in a chat box.
For instance, Claude Artifacts let an agent render real UI, charts, dashboards, and interactive components that assemble live inside the response.
Every major AI product tried to replicate it.
But the problem was that unlike reasoning, planning, tool-calling, etc., none of it shipped natively with LangGraph, CrewAI, or Google ADK.
So teams started building an owned version that required engineering the entire interface layer from scratch.
Most teams, however, just settled for shipping the agent as a backend API in a chat box since rendering the UI is only one piece of it.
To actually make it work, the interface layer also needed real-time streaming, state kept in sync between agent and UI, conversations that persist across sessions, and reconnection when a user refreshes mid-run.
@CopilotKit is now the only open-source framework that actually lets you build your own full-stack Claude-like apps.
It decouples the agent from the interface, talking over AG-UI (an open protocol for agent-to-user communication).
Being a standard protocol, the frontend never needs to know whether it is talking to a LangGraph or a CrewAI agent. You can change the backend anytime and the UI will never notice.
In practice, CopilotKit's interface layer gives several pre-implemented React building blocks that wire the agent directly into the app, like:
- generative UI, so the agent renders real components instead of text
- chat windows, sidebars, and popups, or a fully headless setup
- shared state, so the agent and app stay in sync
- human-in-the-loop approvals, where the agent waits before acting
- persistent threads that store the whole session, including the agent-user interactions and generated UI, not just text
And because that full history is captured, those interactions can feed a self-learning layer that also improves the agent from real usage over time.
The interface layer that Anthropic spent years engineering in-house is now literally available to any developer/team.
CopilotKit is open-source with 30k+ GitHub stars, and AG-UI, the protocol underneath, is already supported across every major agent framework: LangGraph, CrewAI, Mastra, Google ADK, and more.
CopilotKit GitHub repo → https://t.co/wkQ1taF0rM
(don't forget to star it ⭐ )
If you want to go deeper, I found a detailed breakdown by Shubham Saboo recently on the three Generative UI patterns, with implementation.
Read it below.
🚨 Karpathy was right. He warned that 90% of AI advice dies in 6 months.
Spoiler: most tools won't even survive 90 days.
What actually compounds?
> Context engineering
> Tool design
> Orchestrator-subagent patterns
> Eval discipline
> MCP as the protocol layer
> The harness mindset (harness > model)
Your plan if you have less than 2 hours today:
Watch this 40-minute video from the master.
Then get hands-on with this brilliant guide by @0xMortyx on how to build your first AI Agent in Claude in 30 minutes 👀 ↓
GOOGLE'S INVESTMENTS SHOULD BE STUDIED.
Google owns 7% of SpaceX and 14% of Anthropic, two of the biggest IPOs in history, both listing this year.
$900 million invested in SpaceX in 2015 is now worth $126 billion, a 140x return.
$13 billion invested in Anthropic is now worth $135 billion, a 10.4x return.
Those two stakes are now worth $261 billion combined, an 18.8x blended return before either company has even gone public.
one of the quotes i find most inspiring on a hard day:
"Whatever your hand finds to do, do it with all your might, for in the realm of the dead, where you are going, there is neither working nor planning nor knowledge nor wisdom"
Ecclesiastes 9:10
🚨 Claude Code's GitHub Actions Vulnerability Lets Attackers Compromise Any Repository
Source: https://t.co/lb0fzVp2ox
A critical supply chain vulnerability in Claude Code's GitHub Actions that could allow attackers to compromise any repository using Anthropic's official CI/CD workflow, including Anthropic's own infrastructure.
When combined with prompt injection techniques, it could enable a fully unauthenticated external attacker to exfiltrate secrets, steal OIDC tokens, and push malicious code to any downstream repository that depends on the Claude Code GitHub Actions workflow.
Claude Code GitHub Actions restricts workflow execution to users with write or admin access. However, the checkWritePermissions function unconditionally trusted any actor ending in [bot] regardless of actual permissions.
#cybersecuritynews