Marimo CVE-2026-39987 exploited within 10 hours of disclosure, enabling unauthenticated RCE and credential theft, emphasizing urgent patching needs.
AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.
A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.
Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.
Mark Collier briefed me on two updates under embargo at KubeCon Europe 2026 last month: Helion, which opens up GPU kernel ...
Over 1,000 exposed ComfyUI instances exploited via unauthenticated code execution, enabling Monero mining and botnet expansion.
On X, Shou linked to a zip file with the leaked code. He is the CTO of Fuzzland and a dropout of the UC Berkeley Ph.D.
The PyTorch Foundation also welcomed Safetensors as a PyTorch Foundation-hosted project. Developed and maintained by Hugging ...
Anthropic is expanding Claude Cowork on desktop, bringing its file-aware AI workflow tool to more paid users on macOS and ...
Claude is Anthropic’s AI assistant for writing, coding, analysis, and enterprise workflows, with newer tools such as Claude ...
A threat actor started exploiting CVE-2026-39987, an unauthenticated RCE vulnerability in Marimo, nine hours after public disclosure.
Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...