JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

A new framework called SkillWeaver tackles AI agent tool routing by skipping full-library loading, cutting token use 99% on ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

MotherDuck is launching Flights, an agent-native data pipeline that enables users to choose the MCP server and AI agent of their choice to build and deploy data pipelines in minutes using a flexible, ...

Everything you need to know about how we analyzed the 13,000+ comments submitted in the federal government’s request for ...

The offices of Google are pictured in London on February 28, 2026. JUSTIN TALLIS/AFP via Getty Images Google released agents-cli on April 21, 2026, and it has shipped 13 updates in the 71 days since — ...

Anthropic’s Claude models are now generally available in Microsoft Foundry, giving Azure developers and enterprise application teams another major frontier model option inside Microsoft’s cloud AI ...

Claude Sonnet 5 is the most agentic Sonnet model yet, rivaling Opus 4.8 in performance at lower prices, Anthropic said.

Spring AI 2.0 advances the Java framework for generative AI apps with a Spring Boot 4 baseline, cleaner agentic tooling, Model Context Protocol support and vendor-backed integrations including Azure ...

NVIDIA AI infrastructure bet collapses as Caffe creator Yangqing Jia quits after a broken open-source pledge. SemiAnalysis ...