CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

On the silicon side, Nvidia's tech let Humanoid slash hardware development from the usual 18–24 months to just seven months. Executives pitched the deployment as proof that factory-grade humanoids can ...

OpenAI expands Codex into an AI workspace for 3 million weekly developers, adding features for computer use, memory, and ...

Open WebUI has been getting some great updates, and it's a lot better than ChatGPT's web interface at this point.

Mark Collier briefed me on two updates under embargo at KubeCon Europe 2026 last month: Helion, which opens up GPU kernel ...

AWS is announcing the release of Amazon S3 Files, a new file system that seamlessly connects any AWS compute resource with Amazon Simple Storage Service (Amazon S3). With S3 Files, Amazon S3 is the ...

Better way to master Python.

The source code of Anthropic's CLI tool Claude Code was accidentally made publicly accessible via a source map in the npm registry.

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...