GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across developer systems.
OpenAI to acquire Astral, bringing Python tools like uv, Ruff, and ty into Codex as it moves from code generation to executing full developer workflows.
New Opentrons AI capability lets scientists simulate and visually inspect automated laboratory experiments before robots execute them.
Sysdig cited figures from the Zero Day Clock initiative which revealed that median time-to-exploit (TTE) collapsed from 771 ...
Savvy developers are realizing the advantages of writing explicit, consistent, well-documented code that agents easily understand. Boring makes agents more reliable.
Ocean Network links idle GPUs with AI workloads through a decentralized compute market and editor-based orchestration tools.
The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...
Binny Gill, CEO of Kognitos, describes his company's mission to make "English as code" — a platform that lets businesses write rules for AI in plain language and have them execute deterministically, ...
Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.
Something else to worry about.