Latest news and analysis in technology.
TeamPCP's Trivy supply chain attack claimed its biggest victim. Cisco lost 300+ GitHub repos including AI Defense source code, unreleased products, and customer code belonging to banks and U.S. government agencies. The hackers set an April 3 deadline. Cisco still hasn't said a word publicly.
A 60MB source map file left in the npm package exposed 512,000 lines of TypeScript, 40 tools, and an internal 'Undercover Mode' designed to stop leaks. It shipped anyway.
Starcloud just raised $170M at a $1.1B valuation for orbital AI data centers. The real story is not satellites. It is the terrestrial energy crisis forcing AI infrastructure to look beyond Earth.
CISA flagged active exploitation of a critical Langflow RCE flaw within 20 hours of disclosure. Meanwhile, TeamPCP compromised telnyx, litellm, Trivy, and KICS in a coordinated supply chain campaign targeting AI dev tooling.
Iran's MOIS-backed Handala hackers breached FBI Director Kash Patel's personal Gmail account, publishing 300+ emails and personal photos. TechCrunch verified the emails via DKIM signatures. Suspected vector: password reuse from a prior data leak.
SoftBank's $40 billion unsecured bridge loan to fund its OpenAI position is not just a bet on AI. It is a 12-month timer on the entire AI infrastructure thesis.
Three weeks in, the M5 MacBook Air's real developer story isn't the 15% CPU bump. It's the 3.5-4x faster local LLM inference from Apple's new Neural Accelerators, and the thermal throttling that limits sustained workloads.
Forty-four thousand practitioners in San Francisco watched the security industry ship autonomous AI agents for both offense and defense in a single week. The real story isn't AI in security. It's an arms race nobody controls.
Three CVEs in LangChain and LangGraph expose filesystem data, environment secrets, and conversation history across frameworks downloaded 84 million times last week. Patches are available. Here's what to do.
Every outlet ran the obituary. The real story is what Apple built to replace it — and why the Mac Studio cluster changes what pro hardware even means.
Figure 03 became the first humanoid robot to enter the White House on March 25, greeted diplomats from 45 countries in 11 languages, and raised questions that neither the White House nor Figure AI has answered.
RSAC 2026 closed with every major cybersecurity vendor announcing agentic AI for the SOC. Here is what shipped, what is still on a roadmap, and what security teams need to evaluate now.
At RSAC 2026, every major security vendor shipped an AI product on the same day. That's not a coincidence. It's the security industry restructuring itself around a new reality: the things being protected are no longer humans, but autonomous agents.
Check City disclosed that an unauthorized actor accessed borrower data including SSNs, financial accounts, and payment card details. Here's the timeline, what's missing from the disclosure, and exactly what affected borrowers should do right now.
After three decades as the world's most successful chip design licensor, Arm held up its own silicon on stage. The AGI CPU is not just a product launch. It is a signal that the AI buildout is collapsing the old horizontal layers of the semiconductor industry.
Kali Linux 2026.1 drops with 8 new offensive security tools, a kernel bump to 6.18, and a BackTrack nostalgia mode that recreates the legendary BT5 desktop. Here is what is worth installing and what to skip.
TeamPCP compromised the Trivy vulnerability scanner and used stolen credentials to poison LiteLLM on PyPI. Over 1,000 cloud environments are confirmed affected, with Mandiant warning the number could reach 10,000. Here is the timeline, the blast radius, and what you need to do right now.
KubeCon Europe 2026 revealed a stark gap: 82% Kubernetes adoption but only 7% daily AI deployment. NVIDIA's GPU driver donation and $24.8B in potential open-model savings could change that.
RSAC 2026 opened with a clear message: AI agents are the new enterprise attack surface. Microsoft, Straiker, and SOCRadar all launched agent security products in the first 24 hours. Here is what happened, who is affected, and what your security team should do this week.
The Pentagon has designated Palantir's Maven Smart System as an official program of record, embedding a private company's AI deep into the U.S. military's targeting infrastructure. The engineering is impressive. The accountability framework is not.
CERAWeek 2026 in Houston is headlined by cloud infrastructure executives from AWS, Google, Microsoft, NVIDIA, and Meta. The hyperscalers are collectively spending over $600 billion on data centers this year, and they sent their energy teams, not their AI researchers. The bottleneck is watts, not chips.
Everyone is writing 'Amazon tries phones again.' The real story is that Amazon does not want to sell a phone. It wants to own the AI data layer on mobile that Apple and Google currently control.
CVE-2026-33017 gives attackers unauthenticated remote code execution on Langflow AI platforms with a single HTTP request. Exploitation began 20 hours after disclosure, no proof-of-concept needed.