A bipartisan House bill would force frontier AI developers to submit to independent audits, fund open-source security grants, and create AI security testbeds — but its preemption of state AI laws has sparked fierce opposition from both sides of the aisle.
The Shai-Hulud supply-chain campaign compromised 19 scientific PyPI packages (Dynamo, Spateo, CoolBox, U-FISH, and more) with malware that steals developer secrets — cloud keys, publishing tokens, SSH keys, and AI tool configs. The payload triggers on any Python invocation.
Broadcom released its largest-ever Spring security update and is using AI to hunt vulnerabilities across 100,000+ dependency builds — but zero-day patches are locked behind its enterprise paywall.
Google’s new Gemma 4 model checkpoints use quantization-aware training to slash memory usage while maintaining quality — making on-device AI more practical across phones and laptops.
Google’s Gemma 4 models now use quantization-aware training to shrink their memory footprint without sacrificing quality — a meaningful step forward for running AI on phones and laptops.
