Researchers who found the bug warn that its Moderate rating understates a threat reaching across LLM gateways, MCP servers ...

A $2,500 pair of humanoid robot legs built from 3D-printed parts and off-the-shelf components is not going to win marathons ...

Open source robotics AI platform LeRobot surpassed 58,000 community datasets in 2026 — 50x growth in under a year — making it the largest dataset category on Hugging Face and signaling a ...

The ChromaToast vulnerability can be exploited by forcing the ChromaDB API server to fetch and load maliciously crafted AI ...

The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

The zero-day-to-n-day collapse is no longer theoretical, as demonstrated by CVE-2026-39987 in Marimo, which saw initial exploitation occur just nine hours and 41 minutes after disclosure without a ...

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious versions anyway. The CI/CD Trust-Chain Audit Grid maps the six gaps it ...

Attackers compromised the official Mistral AI Python package on PyPI along with hundreds of other widely-used developer ...

Hermes Agent’s latest release shows how AI agents are evolving from assistants into self-improving tools that learn, build, and automate work.

As of mid-May 2026, the narrative around AI in software development has moved past the 'chatbot' phase into a new era of active collaboration. With Anthropic's launch of Claude Design, OpenAI's ...