Biz & IT – Ars Technica

Anyone who has downloaded affected Red Hat packages should investigate immediately.

The botnet was reportedly tied to a Russia-based residential proxy network.

Undisclosed addition in jqwik instructed AI coding agents to delete app output.

Telltale SSD activity can be measured in the browser using simple JavaScript.

“BadHost” was found in Starlette, a package with 325 million weekly downloads.

Deal also launched the first quantum foundry company, but is there a need for it?

Critics note a lack of factual support in lawsuit filed by US Senate candidate.

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.

Beneficiaries include startup backed by firm with links to the Trump family.

Google publishes exploit code before patch, reported 42 months earlier, is fixed.

SSH keys, plaintext passwords, other sensitive data had been up since November 2025.

It’s not entirely clear how the exploit works. Microsoft says it’s investigating.

Layoffs are “not a savings-driven restructure,” CFO says.

Production-version patches are coming online and should be installed pronto.

Across the country, schools and colleges postpone year-end tests.

The developer of Firefox says it has “completely bought in” on AI-assisted bug discovery.

A celebration of the tweaks and customizations that make life easier at the CLI.

Daemon Tools users: It’s time to check your machines for stealthy infections, stat.

Reddit REALLY wants you to use its app.

Amid falling revenue and store closures, GameStop wants to buy the much larger eBay.