Chinese AI models are penetrating the US market with lower costs and open-source strategies, driving global AI adoption and challenging traditional tech pricing models.
Jason··2 min read
The hacking group TeamPCP has compromised npm repositories by stealing maintainer credentials, effectively bypassing provenance verification. This highlights critical vulnerabilities in the human-centric security model of open-source supply chains.
Kenji··2 min read
A hacker group, TeamPCP, stole maintainer accounts to publish over 600 malicious npm packages that bypassed Sigstore verification. This highlights major logic vulnerabilities in digital signatures and open-source supply chain risks.
Kenji··2 min read
The hacker group 'TeamPCP' successfully executed a major supply chain attack on GitHub by injecting malicious code through a poisoned VS Code extension, compromising approximately 3,800 internal repositories. The breach also affected Microsoft’s Python SDK, underscoring the severe risks third-party tools pose to corporate software security.
Kenji··2 min read
DeepSeek has launched its V4 model, focusing on enhanced long-context processing and cost efficiency, maintaining its commitment to open-source AI development.
Jason··1 min read
DeepSeek launched its new flagship V4 model, claiming near-frontier AI performance at a fraction of the cost, challenging the dominance of closed-source models.
Jason··2 min read
Microsoft’s sudden lockouts of prominent open-source developers, including the makers of WireGuard and VeraCrypt, have halted critical software updates and exposed risks in the Windows supply chain.
Kenji··2 min read
Chinese startup Zhupai AI has released its open-source GLM-5.1 LLM under an MIT license, with benchmarks showing it outperforming proprietary leaders like GPT-5.4 and Opus 4.6 on SWE-Bench Pro.
Jason··1 min read
Nvidia launched its open-source "Agent Toolkit" at GTC 2026, aimed at accelerating the development of enterprise-grade autonomous AI agents. The toolkit has already secured adoption from 17 major firms including Adobe and SAP, as Nvidia aims to solidify its role as the infrastructure backbone of the agentic AI era.
Jason··2 min read
Google has launched its new Gemma 4 model under the permissive Apache 2.0 license, a strategic move intended to foster deeper enterprise integration.
Jason··1 min read
Google has launched its Gemma 4 model series under the Apache 2.0 license, a strategic shift designed to remove legal hurdles and encourage widespread enterprise adoption.
Jason··2 min read
The Agentic AI wave is sweeping through 2026, with Nvidia and Microsoft launching major platforms for autonomous agents. Andrej Karpathy has open-sourced 'autoresearch,' a tool designed to automate the scientific method using AI agents. Market data from Morgan Stanley suggests that 10-20% of commerce could be agent-driven by 2030, totaling nearly $385 billion. Meanwhile, security concerns have led Microsoft to warn about 'double agent' risks, and OpenAI to acquire security startup Promptfoo to fortify its agentic ecosystem.
Jason··3 min read