The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
Developer Tech

PolinRider supply chain attack expands to Packagist ecosystem

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...
IEEE

Deploy Low-Latency Convolutional Neural Networks for Autonomous Embedded Applications: Real-Time Object Recognition on AI-Integrated Microprocessors

Abstract: Autonomous embedded systems increasingly leverage real-time perception for safe and efficient operation in dynamic conditions. Perception in robotics, unmanned vehicles, smart sensors, and ...
Reuters

U.S. bank regulators ramp up scrutiny of AI use at financial companies

NEW YORK, June 12 (Reuters) - U.S. banking regulators are stepping up scrutiny of how lenders deploy artificial intelligence as the developing technology sweeps through the industry, pressing firms on ...
The Hacker News

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat ...
Business Insider

Voltus Acquires Brightfield AI to Accelerate Energy Storage Deployment

SAN FRANCISCO, June 10, 2026 (GLOBE NEWSWIRE) -- Voltus, Inc., the leading virtual power plant (VPP) operator and distributed energy resource (DER) platform, today announced its acquisition of ...