These are my go-to libraries for Python data crunching.

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The ...

Anthropic is bringing its most powerful AI model to the general public for the first time, but it’s doing it with guardrails. On Tuesday, the AI firm launched Claude Fable 5, the first publicly ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

European Commission on Wednesday proposed new rules to bolster homegrown tech. There have been growing calls for Europe to diversify away from non-European providers of critical tech as geopolitical ...

This is part of a series of columns about the viability of the American university system. In the previous installment of this series on the future of higher education, I talked with professors about ...

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...

The robotics startup Figure AI livestreamed humanoid robots placing thousands of packages onto a conveyor belt for more than a week—a spectacle that included a robot competing against a human intern ...

A compromised maintainer account was used to publish malicious package versions across the @antv namespace. A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, along with GitHub ...