Compliance continues to drive adoption of trusted open source: We saw the same themes from December present here, underscored ...

For quantum computing to reach the point where it is fault-tolerant, scalable, and commercially viable, it’s going to be with ...

How AI has suddenly become much more useful to open-source developers ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Meta pauses Mercor partnership after a major data breach raises concerns over exposure of sensitive AI training data.

The threat group's shift to speedy attacks on AWS, Azure, and SaaS instances shows organizations need to respond quickly to compromised credentials.

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software packages, to distribute a cross-platform, ...

The PyTorch Foundation also welcomed Safetensors as a PyTorch Foundation-hosted project. Developed and maintained by Hugging ...

The source code of Anthropic's CLI tool Claude Code was accidentally made publicly accessible via a source map in the npm ...

Mark Collier briefed me on two updates under embargo at KubeCon Europe 2026 last month: Helion, which opens up GPU kernel ...

The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.