Microsoft has released version 1.0 of its open-source Agent Framework, positioning it as the production-ready evolution of the project introduced in October 2025 by combining Semantic Kernel ...

Meta pauses Mercor partnership after a major data breach raises concerns over exposure of sensitive AI training data.

AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

A growing body of academic research warns that AI-assisted “vibe coding,” where language models assemble software from ...

Compliance continues to drive adoption of trusted open source: We saw the same themes from December present here, underscored ...

After the supply chain attack on LiteLLM, attackers were able to access internal Cisco data, it is said. Source code from ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

The threat group's shift to speedy attacks on AWS, Azure, and SaaS instances shows organizations need to respond quickly to ...

More open-source developers are finding that, when used properly, AI can actually help current and long-neglected programs.

The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.