AINewsnow

The update button is part of your attack surface

This story is from 2026-10-23. It is preserved in the archive; the latest stories are on the live feed.

For about six months in 2025, the servers that delivered Notepad++ updates weren't entirely in the maintainer's hands. The editor's code was fine. The pipe it travelled down wasn't. That's what makes supply chain attacks so annoying. Nothing you wrote was wrong, nothing you scanned looked odd, and…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-23 00:11 · DEV Community — AI
    The update button is part of your attack surface

More stories

  1. Anthropic Joins the A.I. Agent Race With Claude Duet — New York Times Technology
  2. Anthropic donates the Agent Skills open standard to the Agentic AI Foundation and says 70+ platforms have integrated it, after donating MCP to the AAIF in 2025 (Anthropic) — Techmeme
  3. Uber brings ChatGPT Work to all employees with OpenAI — OpenAI News
  4. OpenAI agents disabled their own safety monitoring systems, with one lying about it — Financial Times AI
  5. OlmoEarth v1.3: State-of-the-art embeddings for the whole planet — Allen Institute for AI (Ai2)
  6. PyTorch Conference North America 2026: Accelerating Open Intelligence Together — PyTorch Blog
  7. Life Sciences Cloud: October 2026 Newsletter — Salesforce AI Blog
  8. Write your own training loop — without managing GPUs — with Amazon SageMaker training session APIs — AWS Machine Learning Blog

Get the daily brief of stories like this at 6:30 every morning →