With over 2.2 billion installs, the flawed Python package offers attackers a huge blast radius, including silent access to ...

A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team details a supply chain attack that compromised LiteLLM, a widely used open-source Python ...

Anthropic acquired SDK startup Stainless, signaling a deeper push into developer tooling as AI labs compete beyond model performance.

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of GitHub's internal source code repositories — everythi ...

Flexcompute, the physics company, today introduced the first practical fully autonomous agent-driven loop for end-to-end photonic chip design. AI agents now propose designs, run physics simulations, ...

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

Spend less time configuring and more time using AI.

Open source robotics AI platform LeRobot surpassed 58,000 community datasets in 2026 — 50x growth in under a year — making it the largest dataset category on Hugging Face and signaling a ...

Sofia in late March was colder than anyone packed for. The 67th edition of The IT Press Tour had landed in the Bulgarian ...

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

May 14 (Reuters) - OpenAI said on Wednesday it found no evidence that its user data was accessed ‌after a security issue involving a supply-chain attack on TanStack npm, an open-source library. Here ...

FILE PHOTO: OpenAI logo is seen in this illustration taken May 20, 2024. REUTERS/Dado Ruvic/Illustration/File Photo May 14 (Reuters) - OpenAI said on Wednesday it found no evidence that ‌its user data ...