The Stack — May 23, 2026

Today's technology briefing highlights significant developments in cybersecurity, AI/ML, industry moves, and software engineering.CybersecurityA hacker group named TeamPCP is conducting aggressive software supply chain attacks, affecting approximately 4,000 GitHub repositories. These attacks involve embedding malware into open-source tools, compromising GitHub's own code but not customer data. This incident underscores the critical need for enhanced security measures in managing open-source platforms. Additionally, a major security breach at the U.S. Cybersecurity & Infrastructure Security Agency (CISA) involved sensitive AWS GovCloud keys being exposed on GitHub, raising concerns about internal security protocols.AI and Machine LearningIn AI developments, a new IDE called Superset (YC P26) has been introduced, facilitating the orchestration of multiple CLI-based coding agents across isolated git worktrees. This tool supports parallel processing, enhancing efficiency in coding environments. Meanwhile, DeepSeek has permanently reduced the pricing for its V4 Pro model, indicating a strategic shift in token-based API pricing. These advancements highlight the ongoing evolution of AI tools to enhance software development workflows.Industry MovesIn industry news, HMD has launched the Vibe 2 5G smartphone in partnership with Sarvam, featuring an AI chatbot that supports 22 Indic languages, targeting the Indian market. Sarvam is reportedly nearing a $300 million funding round, reflecting the growing interest in AI integration within affordable hardware. Additionally, Spotify is expanding its AI-generated content offerings, including AI-narrated audiobooks and personal podcasts, in collaboration with Universal Music Group. This move aims to diversify Spotify's platform, although it raises questions about user experience and content discovery.Software Engineering and Open SourceMicrosoft is phasing out its Claude Code licenses in favor of GitHub Copilot CLI, streamlining its internal coding tools to reduce costs. This transition is part of a broader effort to integrate AI into software development processes. In open-source news, the TorQ framework for kdb+ systems has been updated, focusing on performance and maintainability, while a new Kanban app offers a local-first, open-source solution for task management, integrating AI agents like Claude and Codex for enhanced workflow efficiency.These developments underscore the dynamic nature of technology advancements across cybersecurity, AI, industry strategies, and software engineering, highlighting both opportunities and challenges in the integration of AI and open-source tools.