Link Sharing

The latest artificial intelligence models from Anthropic and OpenAI are extending the United States’ lead over China and intensifying the rivalry between the countries.

A dispute over fsnotify maintainer access set off supply chain alarms around one of Go’s most widely used filesystem libraries.

Alon Haimovich is leaving after an investigation into alleged unethical use of Azure by the Ministry of Defense, “Globes” has learned. Microsoft Israel has been placed under the management of Microsoft France.

Introducing the Fedora Hummingbird Linux image-based OS: A new rolling Linux distribution that brings zero-CVE security, atomic updates, and the container workflow model to Fedora Linux.

When trying to use any Kubernetes CRD (or even core types) I am pretty much always pulling up a reference doc of some sort to see what fields are available and what they do. However, I have pretty much always found the options for this to be pretty bad. To remedy this, I have been working on a new tool that automatically generates documentation for Kubernetes CRDs, and I wanted to share it here.

Production-version patches are coming online and should be installed pronto.

In a word: AI.

Master Exim source repository

Co

About half of agent tasks can run on a local 35B model. The real advantage isn't cost or privacy — it's latency. 2.1x faster means more iteration cycles per session.

Idempotency is not just an HTTP header or a key lookup. This article covers the failure cases that bite real APIs: different requests with the same key, concurrent retries, partial success, downstream uncertainty, response replay, expiry, and duplicate message handling.

A field guide to the engineers and designers firing AI agents at every problem in sight

LLM agents that consolidate experience into textual memory often make their memory worse over time. We trace the failure to the consolidation step itself.

Experiments with getting usable outputs out of local models on a standard Macbook

The U.S. Commerce Department removed details from its website about its ​agreement with Google, xAI and Microsoft to ‌test their artificial intelligence models for security vulnerabilities, according to a Reuters review of the agency's site.

On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 malicious versions across 42 @tanstack/* packages on npm. Full postmortem.

Jean-Baptiste Kempf is lead developer of VLC and president of VideoLAN. Kieran Kunhya is a longtime FFmpeg contributor, codec engineer, and the person behind...

GitLab will flatten management, cut its country footprint by 30%, and reorganise R&D into 60 teams. CEO Bill Staples says savings will be reinvested in AI agents.

There’s a deep, forbidding moat that surrounds Nvidia—and it has nothing to do with hardware.

Amazon launched Amazon Supply Chain Services, bundling freight, distribution, fulfillment, and parcel shipping into a single offering for any business. Shares of UPS dropped nearly 10% and FedEx fell more than 9%.

TLDR The 90 day responsible disclosure window was built for a world where bug finders were rare and exploit development was slow. That world is gone. LLMs have compressed both timelines to near-zero. I have seen it first hand, and so has everyone else paying attention. This post lays out why the old model is broken, with real stories, and makes one ask to the industry: treat every critical security issue as P0 and patch it immediately.

Fewer people are buying parts and building new PCs from scratch.

yes, as in singular one. Back in April 2026 Anthropic caused a lot of media noise when they concluded that their new AI model Mythos is dangerously good at finding security flaws in source code. Apparently Mythos was so good at this that Anthropic would not release this model to the public yet but instead … Continue reading Mythos finds a curl vulnerability →

Explore GTIG's 2026 report on how adversaries leverage AI for zero-day exploits, autonomous malware, and industrial-scale cyber operations.

Tame the Kubernetes "integration tax." Learn how to wire CNCF projects like Prometheus and Cilium for production-grade reliability.

A trendy productivity hack, A.I. note takers are capturing every joke and offhand comment in many meetings. They could also potentially waive attorney-client privilege.

HiddenLayer researchers identified a malicious Hugging Face repository typosquatting OpenAI’s Privacy Filter release, distributing infostealer malware through loader.py and start.bat. Learn the indicators of compromise and recommended response actions.

Why the AI bubble is a dependency trap: A guide to local LLM inference hardware

Nvidia is pouring billions of dollars at a time into companies across the AI infrastructure stack, while also signing commercial deals with them.

Mistral is building sovereign, open-weight AI for enterprises that care less about hype and more about control, cost, and deployment flexibility,