CrowdStrike and Google took down the Glassworm botnet, which infected open-source projects to compromise downstream developers and their users.
Why it matters — Supply-chain attacks on dev tools are active and evolving—founders of dev platforms need hardened security by default.
Hugging Face's TRL library now includes Delta Weight Sync, allowing efficient distribution of trillion-parameter models via Hub buckets, reducing bandwidth overhead.
YouTube is rolling out automatic labeling for videos containing AI-generated content. The system will tag animated, unrealistic, or partially AI videos, though detection limitations mean some AI content may remain unlabeled.
Security researchers found that websites can analyze SSD activity through simple JavaScript to infer user behavior and build visitor profiles, creating a new fingerprinting vector.
Lux Optics released Halide Mark III with a new film simulation engine co-developed with Hollywood colorist Cullen Kelly, offering preset looks for different genres and a built-in RAW editor.
xTool announced the M2, a modular desktop machine with a CMYK print head and swappable laser cutting/engraving tools, designed for materials like paper, wood, felt, and metal.