AssemblyAI published a JavaScript tutorial for a browser voice assistant using its Voice Agent API, WebSocket tokens and AudioWorklet audio handling.
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.