Security researchers have warned of a “critical, systemic” vulnerability in the model context protocol (MCP) which could have a significant impact on the AI supply chain. MCP is a popular open source ...

Google launches AI agent suite at Cloud Next 2026 with Workspace Studio, A2A protocol at 150 orgs, and Project Mariner. The pitch: only Google owns the full stack.

A design choice in the MCP SDKs allows remote code execution across the AI supply chain.

CLI-Anything generates SKILL.md files that AI agents trust and execute. Snyk found 13.4% of agent skills contain critical ...

Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository ...

For students of early PC history, this isn’t even the first piece of 86-DOS history that has been newly rediscovered this ...

Hackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since ...

Plus: The Pentagon has struck sweeping AI deals for classified work. This is today's edition of The Download, our weekday ...

In early 2025, a class-action lawsuit against GitHub, Microsoft, and OpenAI over Copilot’s use of open-source training data ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...