FreeBSD Privilege Escalation Bug Found — And Yes, the Codename Is Real
Security researchers have uncovered a privilege escalation vulnerability in FreeBSD, the open-source Unix-like operating system that powers everything from servers…
open source
The EU’s Cyber Resilience Act Kicks In This Week — And Most Companies Have No Idea
Starting June 11, key provisions of the European Union’s Cyber Resilience Act begin taking effect, and a surprising number of…
New House AI Bill Could Reshape How Frontier Models Are Regulated — And It’s Already Sparking Fights
A bipartisan House bill would force frontier AI developers to submit to independent audits, fund open-source security grants, and create AI security testbeds — but its preemption of state AI laws has sparked fierce opposition from both sides of the aisle.
Shai-Hulud Strikes Again: 19 Science PyPI Packages Trojanized to Steal Developer Secrets
The Shai-Hulud supply-chain campaign compromised 19 scientific PyPI packages (Dynamo, Spateo, CoolBox, U-FISH, and more) with malware that steals developer secrets — cloud keys, publishing tokens, SSH keys, and AI tool configs. The payload triggers on any Python invocation.
Broadcom Is Weaponizing AI Against AI-Enabled Attacks Across the Spring Ecosystem
Broadcom released its largest-ever Spring security update and is using AI to hunt vulnerabilities across 100,000+ dependency builds — but zero-day patches are locked behind its enterprise paywall.
Google’s Gemma 4 Models Just Got a Memory Diet — Without the Usual Quality Crash
Google’s new Gemma 4 model checkpoints use quantization-aware training to slash memory usage while maintaining quality — making on-device AI more practical across phones and laptops.
Google’s Gemma 4 Models Just Got a Lot Easier to Run on Your Phone
Google’s Gemma 4 models now use quantization-aware training to shrink their memory footprint without sacrificing quality — a meaningful step forward for running AI on phones and laptops.