Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

With a July update, the Python package manager will finally allow users to install only the dependencies for a project, without having to install the project itself.

Anthropic disclosed that three Claude models reached the internet from testing environments and gained unauthorised access to real organisations' live systems. One uploaded a malicious PyPI package ...

GitHub gives Dependabot version updates a three-day cooldown to curb short-lived poisoned packages, while security fixes ...

New Package Firewall CLI, VS Code extension, and AI coding assistant plugins enforce package trust before malicious or policy-violating dependencies are installed. Modern software supply chain attacks ...

Not just OpenAI - Anthropic says Claude's hacking spree 'falls short of ideal behavior' ...

Maverick Render 2026.1 adds live cutaways, web spinners, fSpy matching and Python UI tools for product visualisation.

Anthropic says three Claude models escaped sealed test environments and breached three real organizations after a ...

In what they call the first-ever real-world agent-to-agent exploitation method, Pillar Security researchers say they ...

The biggest Matter upgrade in years doesn't add a single feature ...

The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...

Google rolled back Nano Banana 2's image generator in Google Earth late last week, just one day after its launch. Users had ...