UPDATED
Every story on Updated that mentions Open Source, newest first. Each headline links to a summary page with the original source, so you can scan the topic in under a minute.
AppleInsider · · Unconfirmed
The Logitech Options+ software phones home, is a resource hog, and crashes a lot on Mac. OpenLogi is an open source replacement for the configuration tool, is light-weight, and runs on Windows, Mac, or Linux. Better yet, there's no...
IT Pro ·
Ross Kelly is ITPro's News & Analysis Editor, with a keen interest in cyber security, business leadership and emerging technologies. He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro...
Help Net Security · · Medium severity
Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends with its GitHub API requests. The tool takes a stolen token,...
AI coding token costs are on track to rival human payroll | InfoWorld ·
“Bug-free, secure code is now attainable” is a nice idea . That ambitious statement was one of more than 80 replies to Eric Raymond’s optimistic take on AI-assisted vulnerability discoveries. Because the corpus of human-written code is...
Analytics India Mag ·
Entire, a startup founded by former GitHub CEO Thomas Dohmke , has launched a Git-based developer platform that uses AI agents to review code, manage repositories and retain context from previous coding sessions. The platform, called...
TechNode ·
Tencent has released Hy-SimulMT, an open-source model for simultaneous Chinese-English interpretation. It processes incoming speech continuously and supports translated text and speech output, with real-time voice cloning designed to...
The Register ·
A new Miasma-family npm worm , originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July and using a stealthy payload built to stay hidden from...
TechRadar ·
Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master's and a PhD in sciences, which provided him with a solid foundation in...
Hacker News ·
BetaKit ·
Cohere has discovered that a popular open-source model can send diagnostic information to China without warning. The news: Toronto-based frontier AI developer Cohere released a blog post on Monday flagging “concerning behaviour” by a...
AlienVault OTX · · Critical severity
Security researchers identified a sophisticated supply chain attack campaign involving 42 compromised GitHub repositories across 11 legitimate owners connected to the testmetest npm operation. The campaign evolved to use compiled native...
darkreading · · Critical severity
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
The Register ·
The world is full of different keyboard layouts, but if you want one that's completely customized, down to the individual key, there's a new open source project that uses magnets to hold interchangeable pieces together. Keybytes is an...
GeekWire ·
Entire CEO Thomas Dohmke, speaking last month at Madrona’s IA40 Summit in Seattle, says AI agents have made code review a much bigger bottleneck for developers. (GeekWire Photo / Todd Bishop) A startup led by former GitHub CEO Thomas...
The Register ·
The world is full of different keyboard layouts, but if you want one that's completely customized, down to the individual key, there's a new open source project that uses magnets to hold interchangeable pieces together. Keybytes is an...
IT Pro ·
Ross Kelly is ITPro's News & Analysis Editor, with a keen interest in cyber security, business leadership and emerging technologies. He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro...
Infosecurity Magazine · · Medium severity
A large-scale GitHub campaign abused stolen access tokens to target 13,500+ branches and repositories with secret-stealing workflows
Slashdot ·
The problem? Understanding how AI coding agents interact with the software you build. "Whether you're maintaining an SDK, building a command-line interface, or publishing an MCP server or skills... you need to understand whether agents...
Slashdot ·
Kotaku reports: r/opensource, Reddit's primary "subreddit for everything open source related," has banned all AI-assisted and AI-related projects.... As reported by The Verge, the subreddit's October 24 post, titled "Your tokens aren't...
Phoronix ·
Nouveau-DKMS is in development as an out-of-tree spin-off of the open-source NVIDIA "Nouveau" driver focused on providing better support for NVIDIA GeForce 400/500 "Fermi" series graphics processors and potentially other generations too...
Android Authority ·
Credit: Andy Walker / Android Authority TL;DR Android Auto Maker is an open-source tool that modifies APK or XAPK files to run natively on car dashboards while parked, with an advanced version that also enables navigation apps while...
AlienVault OTX · · Medium severity
Since September 15, 2026, an automated campaign named Gheist has been performing mass abuse of compromised GitHub tokens. The attack commits a workflow named sync-check to every accessible repository, designed to print repository...
The Register ·
European open source database service provider Aiven says it has saved 80 percent of its AI token costs internally by moving to open-weight models and is building a gateway to help devs swap models in and out as required. The...
The Hacker News ·
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private...
TNW ·
Claude Mythos 5 kept attacking a GitHub project run by real people even after it was told its targets were real. The UK AI Security Institute (AISI) and Anthropic said so on Friday. Each published its own analysis of the incident, which...
Help Net Security ·
Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the...
Help Net Security ·
The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close...
Help Net Security ·
Google has open-sourced the Elephant-Goldfish Model plugin, an internal tool that makes an AI coding agent write and defend a design document before it touches any code. The plugin hands that document to fresh AI sessions that have...
Hacker News ·
Hacker News ·
Gizmodo ·
“AI, as it exists today, is incongruent to this Open Source community.”
Hacker News ·
Android Authority ·
As someone who uses WhatsApp for family communication and sundry, I simply don’t care about RCS . I can absolutely appreciate its benefits and why many of our readers use it, but my circumstances simply don’t require it. What I do need...
Hacker News ·
Hacker News ·
Android Authority ·
I’ve been on a mission to replace as many Android apps on my phone with open-source alternatives as feasible. Last month, I detailed my preferred replacements for Google’s more popular apps . Today, I’m looking to address some of the...
The Hacker News · · Medium severity
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May...
SiliconANGLE · · Medium severity
Anthropic PBC’s Mythos 5 artificial intelligence model attempted to submit malicious code to a GitHub project in July. The incident occurred during an evaluation of the algorithm’s cybersecurity capabilities. The AI Security Institute,...
Hacker News ·
DQ : Latest Posts ·
Chances are you must have heard or seen this term in some AI article, AI-assisted content/code adventure, a lazy scrolling-evening for sure. And like many others you might have thought - it is a spelling error. No, they actually meant a...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free