A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
cryptopolitan

Mistral AI and TanStack hit in supply chain attack with SLSA-attested malware

A May 11 supply chain attack affected over 170 npm and PyPI packages, including 404 malicious versions of Mistral AI, TanStack, UiPath, OpenSearch, and Guardrails AI. It’s the first documented case of ...
GitHub

Azure AI Content Understanding Samples (Python)

Welcome! This repository contains REST API tutorial samples that demonstrate how to use the Azure AI Content Understanding service directly via HTTP calls with thin Python convenience wrappers. These ...
Wall Street Journal

We’re Using So Much AI That Computing Firepower Is Running Out

What really happens after you hit enter on that AI prompt? WSJ’s Joanna Stern heads inside a data center to trace the journey and then grills up some steaks to show just how much energy it takes to ...
NPR

ICE acknowledges it is using powerful spyware

Immigration and Customs Enforcement is using spyware tools that can intercept encrypted messages as part of the agency's efforts to disrupt fentanyl traffickers, according to a letter sent last week ...
InfoWorld

Using Azure Copilot for migration and modernization

A new migration agent in Azure Copilot guides you through the process of moving applications to Azure, while drawing on GitHub Copilot agents to update them. Microsoft has given Azure many hats: a ...
Ars Technica

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...
Harvard Business Review

When Using AI Leads to “Brain Fry”

A new study finds that certain patterns of AI use are driving cognitive fatigue, while others can help reduce burnout. by Julie Bedard, Matthew Kropp, Megan Hsu, Olivia T. Karaman, Jason Hawes and ...
Forbes

5 Vibe Coding Use Cases Every Company Can Start Using Today

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Vibe coding uses AI to turn plain language into lightweight tools, helping teams prototype, ...
Wired

I Tried H&R Block’s Assisted and DIY Tax Services. Here’s Who’ll Benefit From It

Filing taxes is a pain. Here’s how H&R Block DIY and Assisted performed against other services I tested. I've been through the wringer with my taxes the past couple of years. Last year, I was a ...
Network World

Azure outage disrupts VMs and identity services for over 10 hours

Microsoft’s Azure cloud platform suffered a broad multi-hour outage beginning on Monday evening, disrupting two critical layers of enterprise cloud operations. The outage, which lasted over 10 hours, ...