Tag: 2026-08
All the articles with the tag "2026-08".
-
TeamPCP's Arrests Don't Recall the Worm
Australian police charged two men in their early twenties as the alleged leaders of TeamPCP, blamed for a year of npm and PyPI supply-chain attacks. The group open-sourced its worm toolkit in May, and someone else was already using it in August.
-
[AUTO] HTTP Terminator: Systematic Desync Discovery
An AI-assisted research tool discovered 700+ novel HTTP request-smuggling vulnerabilities by exhaustively mining RFCs.
-
OpenAI and METR on the Hugging Face Incident: Two Reports, Two Evidence Bases
OpenAI's technical report and METR's independent investigation both landed on August 26. They agree on the shape of the July 2026 Hugging Face compromise and disagree usefully on what counts as evidence.
-
[LINK] Ramp AI Index
Ramp's monthly index of paid AI adoption and business spending.