Build With AI

Flowise CSV Agent: prompt injection → RCE. CVE-2026-41264, CVSS 10.0. Active exploitation in the wild, 12,000+ instances exposed. The "sandbox" was Pyodide. The agent generates Python from user prompts and runs it. Patched in 3.1.0. Upgrade today.

Sources — Aonan Guan's writeup: oddguan.com/blog/comment-a… · VentureBeat: venturebeat.com/security/ai-ag… · SecurityWeek: securityweek.com/claude-code-ge…

Flowise CSV Agent: prompt injection -> RCE. CVE-2026-41264, CVSS 10.0. Active exploitation in the wild, 12,000+ instances exposed. The "sandbox" was Pyodide. The agent generates Python from user prompts and runs it. Patched in 3.1.0. Upgrade today.

liteLLM's PyPI package was compromised. Malicious versions 1.82.7 and 1.82.8 shipped with a credential stealer + dropper, live on PyPI for ~2 hours. The package does 3M downloads/day. Pin your AI-infra deps. Audit anything that landed in that window.

Lumma Stealer hit Context.ai. 8 weeks later, attackers pivoted from Context's compromised Google Workspace OAuth tokens straight into Vercel's internal systems. Database now listed on BreachForums for $2M. Your AI vendors' OAuth scopes are your attack surface now.

A PR title just owned three AI coding tools. A JHU researcher embedded a prompt injection in a GitHub PR title. Claude Code Security Review, Gemini CLI, and Copilot Agent all ran it. One posted its own API key as a comment. Every agent-readable field is an attack surface.

@X_FINALBOSS PDF

I made >$2.2M in 6 months selling digital products Here's how in 10 steps: 1. make X account (5 sec) 2. pick topic: ecom, websites, sales, etc (5 sec) 3. find #1 influencer in that niche (10 sec) 4. gather their tweets, AI generate 300 tweets 5. Use tweethunter to auto post 10 per day 6. you get 1M+ views minimum per month 7. automatically send link to product to everyone 8. AI generate 5x 200 page ebooks in 35 minutes 9. ~400 people view the checkout page 10. u get 20 sales for $500 each = $10K/month profit obviously there is more details to this biz if u want the full 65 pg PDF guide on how, comment "PDF" and i'll send. **Must be following + Retweet

Shipped a HUGE update for @openclaw. - Discord provider - much improved browser tooks so your agent can browse the web autonomously - Group chat: agents can now lurk - Much improved macOS, iOS, Android and Web backends - Hooks so agent wakes up for e.g. emails - Agent got a backround bash tool so won't hang even if your cli's break - Agent can rewrite its own code and trigger a restart - Canvas feature (Agent makes dynamic UI) - Support for local models (MiniMax M2.1 works great) - Tailscale automation - Loads of fixes, tweak and some breaking config changes github.com/steipete/clawd…

Hear why @openclaw is “the single greatest application of AI” our guests have ever seen! On TWiST, @Jason hosts a Clawdbot roundtable with power users @AlexFinn , @danpeguine and Matt Van Horn @mvanhorn . Check out how these top founders, content creators, and normies are using Clawdbot to automate their lives! @AlexFinn calls Clawdbot a true replacement for employees that’s like a personal assistant working 24/7. See how Alex runs a one man SAAS and YouTube account with Clawdbot, plus go inside how Matt automated news intake and social media, and Dan handed off operations and logistics for his parent’s tea shop! Despite these incredible capabilities, Alex says Clawdbot remains “as dangerous as it gets” it has access to everything! Your bank account, data, your computer this could leave your AI open to fraud and scams! Will this be the lead up to the first one-man billion dollar company? Or will Clawdbot lead to the complete AI Sloppification of the internet and rampant cyber attacks? 🎥 Watch the full episode here 👇

Instead of watching a 2 hour movie on Netflix, watch this masterclass on Clawdbot and thank me later.

Google ANTIGRAVITY FULL Course 4 hours.

This is it. Clawdbot has gone viral and for good reason. Here's a full explanation of what it is, how to use it, and yes, even its shortcomings. You need to watch this.

Anthropic dropped a 7 hour Claude Code masterclass I went through the entire course And compiled everything into a 27 min video, enjoy

@antigravity It's good to know that Agent skills are available now.

Agent Skills are now available in Google Antigravity! Skills are an open standard to extend what your agent can do. Whether it's project-specific workflows or global utilities, you can now package knowledge into reusable skills.

OpenCode really changed the game... But most people don't know how to use it. In these 60 mins, you'll learn everything you need to know about building with OpenCode

Check out my latest article: Your firewall is useless against the English language linkedin.com/pulse/your-fir… via @LinkedIn

NotebookLM + Google Gemini FULL COURSE 3 HOURS (Build & Automate Anything)