Hackers exploit Marimo flaw to deploy NKAbuse malware from Hugging Face

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

Endee Launches Managed Cloud for its Open-Source Vector Database with Generous Free Tier

The open-source vector database Endee.io, that is well known for its Ultra High performance with 10x lower Infra, is ...
The Next Web

Meta freezes AI data work after breach puts training secrets at risk

Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...
GitHub

DepthSplat: Connecting Gaussian Splatting and Depth

DepthSplat enables cross-task interactions between Gaussian splatting and depth estimation. Left: Better depth leads to improved novel view synthesis with Gaussian splatting. Right: Unsupervised depth ...
Ars Technica

With new plugins feature, OpenAI officially takes Codex beyond coding

OpenAI has added plugin support to its agentic coding app Codex in an apparent attempt to match similar features offered by competitors Anthropic (in Claude Code) and Google (in Gemini’s command line ...
Indiatimes

Tesla's former VP Andrej Karpathy shares AI coding 'horror', 'Python supply chain attack' that could have wiped millions of SSL private keys, database passwords, more; and Elon ...

Andrej Karpathy, the former Tesla AI director and OpenAI cofounder, is calling a recent Python package attack "software horror"—and the details are genuinely alarming. A compromised version of LiteLLM ...