GitHub has confirmed that around 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension: www.bleepingcomputer.com/news/securit... #GitHub #DataBreach #ITSecurity

Google Search is over – at least as we know it. Instead of links, we’ll see AI agents that generate answers directly. Whilst this sounds convenient, there’s a catch: the sources are obscured and publishers continue to lose search engine traffic. techcrunch.com/2026/05/19/g... #Google#AI #SEO

It’s hard enough these days to keep up to date with Linux security. Dirty Frag and Copy Fail are already keeping countless Linux admins busy, and then, the day before yesterday, Fragnesia came along: github.com/v12-security... #Linux #ITSecurity #Fragnesia

Daniel Stenberg (@bagder.mastodon.social.ap.brid.gy) provides important security advice for FOSS maintainers: daniel.haxx.se/blog/2026/05... #ITSecurity #FOSS #OpenSource #AI

Yesterday, the article by Frank Hofmann and me on open licences for documents, images, audio, video, fonts and hardware was published in Linux Magazine: www.linux-magazine.com/Issues/2026/... #OpenSource #OpenHardware

Now elementary-data has also been hit: for just under half a day, a malicious version 0.23.3 was available on PyPI, which had stolen credentials such as SSH keys, AWS login details, API tokens and wallet files. www.elementary-data.com/post/securit... #Python #PyPI #GitHub #ITSec

pip 26.1 is an incredible release, thank you to the pip maintainers!! 💜 – Relative dependency cooldown support! – Installing from pylock.toml – Multiple security fixes Read the full blog post by Richard Si: ichard26.github.io/blog/2026/04... #python #pypi #pip #security #oss #opensource

We have integrated two features from Git 2.54: • Git history: www.python4data.science/en/latest/pr... • Configuration-based Git hooks: www.python4data.science/en/latest/pr... #Git

The testing section has been extensively revised: • Test examples for cusy.tasks • Added Hypothesis extensions • Agile software development using test-driven development and behaviour-driven development python-basics-tutorial.readthedocs.io/en/latest/te... #Python #pytest #Agile #TDD #BDD

🔎🔐 PyPI has completed its second external #security audit! Thanks to @sovereign.tech#securityfor funding, Trail of Bits for the audit, and Alpha-Omega for supporting rapid remediation. Find the full report on the Trail of Bits publication page. #Python #PyPI

Enshitification at scale – Anthropic appears to be introducing an identity verification process for Claude. This is handled by Persona, a service provider with links to Peter Thiel, and may require photo ID: support.claude.com/en/articles #Enshitification #Anthropic #Claude #Persona #PeterThiel

Today is our last day at PyConDE (@pyconde.bsky.social). We’re looking forward to having lots more interesting conversations with you, whether there are any new developments in research software using Python or on LLM coding agents #PyConDE #RSE #Python #AI #LLM

Final preparations for PyConDE & PyData next week in Darmstadt. We’d love to see you there. Please feel free to arrange a meeting with us: cusy.io/en/about/eve... @pyconde.bsky.social #Python #PyData

We have analysed the attacks on the software #SupplyChain of LiteLLM and Telnyx and now recommend dependency cooldowns alongside immutable references, trusted publishers and digital attestations to secure deployments: • python-basics-tutorial.readthedocs.io/en/latest/pa... #Python #ITSec #DevSecOps

Many thanks to @sethmlarson.dev and @miketheman.com for their ongoing work on securing the Python infrastructure.

That wasn’t an April Fool's joke.

Have you had your identity verified on LinkedIn to get the blue tick? If so, I’m afraid I have to tell you that your passport, ID and biometric data are now stored with ‘Persona Identities’, a company funded by Peter Thiel. thelocalstack.eu/posts/linked... #LinkedIn #Privacy

In future, Open Research Europe (ORE) will no longer be open solely to projects funded under the EU Programmes for Research; instead, all research institutions in the participating countries will be able to use the platform free of charge: research-and-innovation.ec.europa.eu/news/all-res...

We have now significantly expanded our collection of open data and organised it by topic: www.python4data.science/en/latest/da... #Python #DataScience #OpenData #Agriculture #Biology #Chemistry #Climate #Weather #ComputerNetwork #Energy #Finance #GeoScience #Healthcare #ImageProcessing #Medicine

OpenAI will acquire Astral and integrate its tools into the Codex ecosystem. Perhaps it’s time for forks: openai.com/index/openai... #OpenAI #Astral #Python

Social media algorithms prioritize right-wing content and influence the political views and behavior of real users. This is the finding of the recent study “The political effects of X’s feed algorithm”: www.nature.com/articles/s41... #SocialMedia #Algorithm #BigTech @algorithmwatch.org

The German Research Association (@dfg.de) has established a binding framework for the use of AI. The aim is to ensure the legally compliant and transparent use of AI: www.dfg.de/en/news/news... #Research #RSE #Science #DataScience #ArtificialIntelligence #AI #Compliance

“Security for LLM Agents” has now been published in @linux-magazine.com: www.linux-magazine.com/Issues/2026/... #ITSecurity #AI #LLM

Mehrsprachige SVGs erleichtern die Wartung und Pflege von Datenvisualisierungen erheblich. Danke an @[email protected] für den Hinweis. www.cusy.design/viz/diagram-... #Multilingual #SVG #Dataviz

Donald Knuth is quite enthusiastic about his recent experiences with generative AI: cusy.io/en/blog/knut... #Knuth #GenAI #AI #Claude #Anthropic

… and now we have also moved the pytest configuration to the pyproject.toml file: python-basics-tutorial.readthedocs.io/en/latest/te... #Python #Testing #pytest

Since tox 4.44.0, tox.ini has been frozen. Only the toml configuration is supported for further development. We have therefore updated our tutorial accordingly: python-basics-tutorial.readthedocs.io/en/latest/te... #Python #testing #tox

📅 Am 23. April ist Girls’Day. 👩‍💻Schülerinnen können mit uns in die Welt der Softwareentwicklung eintauchen und entdecken, wie toll es ist, selbst Software zu schreiben. Weitere Infos findet ihr unter cusy.io/de/about/eve... #GirlsDay #WomenInTech #WomenInSTEM

tox TOML now supports every feature INI ever had, which means tox.ini is officially “frozen” — it’s not dead, it’s just enjoying a very stable retirement 🧓🧊 The future is tox.toml 🚀: tox.wiki/en/4.44.0/re...

Tonight Valentin Haenel will give a talk on Numba, a Python just-in-time (JIT) compiler. We would be delighted to see many of you there: www.meetup.com/python-users... #Python #Berlin

I have been thinking about how LLM agents pose a threat to open source projects and what strategies can offer us at least some protection. Nevertheless, this is likely to remain a challenge: cusy.io/en/blog/how-... #OpenSource #Ai #LLM #AISlop

EU Parliament blocks AI tools. Members should avoid exposing work emails, documents or internal information “to AI features that scan or analyze content,” be “cautious” with third-party AI apps and “avoid granting broad access to data”: www.politico.eu/article/eu-p... #EU #AI #ITSecurity

🧵1/2 The security company LayerX has found a critical vulnerability in Anthropic’s Claude Desktop Extensions (DXT). A manipulated Google Calendar entry can execute arbitrary code on the computer without any user interaction: layerxsecurity.com/blog/claude-... #Anthropic #Claude #AI #ITSecurity

The slides from Rodrigo’s presentation ‘The paradox of itertools.tee’ have now been published: python.berlin/en/latest/pu... #Python #Berlin

Final preparations for the Python Users Berlin (@python.berlin) meeting tonight. I’m looking forward to meeting all the Pythonistas in Berlin and Rodrigo’s (@mathspp.com) talk on itertools.tee: www.meetup.com/python-users... #Python #Berlin

Git 2.53 provides faster insights into the repository structure with 'git repo structure'. However, to better understand this, it is helpful to be more familiar with the Git data and storage models: www.python4data.science/en/latest/pr... #Git

Die BfDI hast das Konsultationsverfahren zum datenschutzkonformen Umgang mit personenbezogenen Daten in KI-Modellen abgeschlossen und ausgewertet: www.bfdi.bund.de/DE/BfDI/Kons... #Datenschutz #KI

Heute ist der vierte Teil unserer Artikelserie zu Open-Source-Lizenzen von Frank Hofmann und mir im Linux-Magazin erschienen: www.linux-magazin.de/ausgaben/202... #OpenSource #OpenData #OpenHardware

On the way to Cologne for a week-long workshop on Python for Data Science. #Cologne

Good report on technological sovereignty and digital infrastructure in the EU: ‘The European Union is currently heavily dependent on foreign technologies. This reduces its capacity for strategic action and its economic competitiveness.’ www.europarl.europa.eu/doceo/docume... #EU #DigitalSovereignty

pandas 3.0.0 has been released. This version brings some exciting new features, including a new standard string data type, consistent copy/display behavior and changed default for date and time data. Further details can be found in the blog post at pandas.pydata.org/community/bl.... #Python #pandas

The EU Commission is currently gathering feedback from open source communities in order to tailor its open source funding accordingly. Wouldn’t that also be something for @python.org? ec.europa.eu/info/law/bet... ec.europa.eu/info/law/bet... #EU #OpenSource #Python #DigitalSovereignty

The section on performance measurements and finding bottlenecks has been significantly expanded to include cProfile/profiling.tracing, tprof, and profiling.sampling/Tachyon: www.python4data.science/en/latest/pe... #Python #Performance

We have updated the documentation section with references to README, CONTRIBUTING, CHANGELOG, etc. python-basics-tutorial.readthedocs.io/en/latest/do... #Python #Documentation

🧵1/2 Trump announces 10% punitive tariffs from 1 February 2026 against Germany, among others – as leverage in the Greenland dispute. From 1 June, the tariff will rise to 25%. www.theguardian.com/world/live/2... #Trump #Greenland #BigTech #DigitalSovereignty

There is a critical security vulnerability in zlib that allows code smuggling. Currently, there does not appear to be an update available. • seclists.org/fulldisclosu... • nvd.nist.gov/vuln/detail/... #Security #zlib #Vulnerability

We have updated the FastAPI extensions. It is very surprising to us that millions of extensions are being downloaded that have not been updated for over a year. www.python4data.science/en/latest/da... @fastapi.tiangolo.com #Python #FastAPI #REST

how did i not know about tox's version range syntax!? (i.e., 3{9-14} == 3{9,10,11,12,13,14}) 😍 (added in tox 4.25.0 on 2025-03-27) #python

Organise the @python.berlin meeting on 12 February with a talk by Rodrigo Girão Serrão (@mathspp.com) on the paradox of itertools.tee: www.meetup.com/python-users... #Python #Berlin

Der Artikel zu unserem Kartenservice auf Basis von @protomaps.com ist im Linux-Magazin erschienen: www.linux-magazin.de/ausgaben/202... #Maps #GIS