EVE Online's Python 3 Migration Is a Masterclass in Legacy Runtime Risk
CCP Games is finally moving 2.4 million lines of EVE Online off Python 2 — six years after the interpreter stopped receiving security fixes. It's a useful case study in how technical debt in a runtime, not just an application, becomes a security liability.
RedC2 4.0: Trojanized npm Packages Ship an AI-Steered Linux Backdoor
Fourteen npm packages posing as calendar and streak-tracking utilities were caught dropping RedC2 4.0, a commercial C2 framework whose new "Red Agent" layer lets operators issue plain-language commands instead of hand-crafting beacon syntax.
Mojo Goes Fully Open Source: The Supply-Chain Angle for AI Infra Teams
Modular has released the Mojo compiler and toolchain under Apache 2.0, three years after first promising it. For teams building GPU/AI workloads on Mojo, the interesting part isn't the license — it's what opening the compiler changes about trust and contribution risk.
AI Coding Agents Are Boosting Commit Velocity — And Security Debt With It
A viral GitHub commit-frequency chart shows how much modern coding agents accelerate output. Independent testing suggests the code behind that velocity still fails basic security checks at a striking rate.