Show HN: Open-source Cloudflare deployed agent native task management and wiki
Hacker News ·
Hacker News ·
Innovation Village | Technology, Product Reviews, Business ·
Jensen Huang , Chief Executive Officer of Nvidia, officially made his debut on social media platform X , using his first public post to wade directly into one of the most fierce debates in modern technology policy: the regulatory status...
BetaKit ·
Canadian AI scaleup Cohere is joining the chorus of tech companies calling for AI models to be more transparent. The news: In his very first post on X last week, Nvidia CEO Jensen Huang shared an open letter in support of releasing...
The Hacker News ·
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents. The 37-member group spans cloud,...
SecurityWeek · · Medium severity
Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days. The post New GitHub, PyPI Policies Boost Supply Chain Security appeared first on SecurityWeek .
The Hacker News · · Medium severity
GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request. "The cooldown configuration option in the dependabot.yml still...
Help Net Security ·
An AI coding agent opens a terminal, reads a config file, and finds a live cloud key sitting in plaintext. It runs with the permissions of the person who launched it. Every file that person can read, the agent reads.
Help Net Security · · Medium severity
An automated update tool watches a package registry, catches a new release the moment it publishes, and opens a pull request for your team. That is the job it was built to do. In September 2025, that speed cut the wrong way.
Hacker News ·
Hacker News ·
Hacker News ·
BleepingComputer · · Critical severity
GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact.
Hacker News ·
The Register ·
OPINION Linux now being officially not anti-AI might be good news for projects that are explicitly anti-AI, but we foresee problems with conflict over where the money and development effort come from. A couple of weeks ago, reluctant...
Tech-Economic Times ·
Elon Musk had first revealed the plan last week, saying the company was identifying and fixing security vulnerabilities before the release. He had also assured that independent reviewers would be invited to verify that the software...
SiliconANGLE ·
A group of tech firms has released an open letter that calls on policymakers not to ban open-source artificial intelligence models. The development follows a report that some Trump administration officials sought to limit the use of...
Electrek ·
Elon Musk says Tesla plans to “open source” the Model S and Model X, and he’s pointing to the original Roadster as the template. The problem is Tesla’s Roadster release amounted to eight files on GitHub plus five document packages...
PYMNTS.com ·
Microsoft , Meta and Nvidia are among 25 tech organizations calling on U.S. policymakers to avoid placing “premature restrictions” on open-weight AI models or “sweeping restrictions” on distillation. In an open letter dated Friday (July...
TechRadar ·
GitHub restructures bug bounty program following flood of AI-generated reports
Hacker News ·
Hacker News ·
Phoronix ·
At this week's AMD Advancing AI 2026 event, "AI" was mentioned thousands of times in talks and in demos. Beyond that, the other term likely most heard during the event was "open"... Not particularly new for AMD with their long history...
MEDIANAMA ·
Access the Bitchat order here: Images | Markdown file (parsed from Images) At midnight 11:16 pm on July 23, Ministry of Home Affairs’ Indian Cyber Crime Coordination Centre (I4C) issued a takedown order to GitHub directing it to remove...
Hacker News ·
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine ·
The notice, shared by developer Jack Dorsey, said the app hampers lawful interception and investigation and followed the reported use of similar Bluetooth messaging apps during a protest in New Delhi
Tech-Economic Times ·
In its notice, I4C said that the app enables communication even during network restrictions and creates a substantial risk of misuse by anti-national elements, terrorist organisations, organised criminal groups and cyber criminals...
AlienVault OTX · · Medium severity
The Intercom TypeScript Library version 7.0.4 has been compromised with malicious code that harvests GitHub credentials. Upon installation, the package executes a preinstall hook that downloads the Bun runtime, then runs a payload to...
AlienVault OTX · · Medium severity
A large-scale campaign exploited GitHub Actions by compromising repositories to launch distributed attacks against cPanel and WHM servers. The operation began with compromised developer accounts, pushing malicious workflow files that...
PYMNTS.com ·
Capital One has announced the open-source release of its in-house agentic AI security tool. The banking giant’s VulnHunter is designed “to apply proactive, attacker-perspective analysis directly to the source code,” Capital One said in...
Hacker News ·
Hacker News ·
TNW ·
The hard part of medical robotics is not the robot. A surgical system needs thousands of attempts to learn a delicate task, and you cannot run those on real patients. Nvidia thinks the answer is to let the robot rehearse inside a...
Hacker News ·
The Register ·
GitHub has decided that, if everyone with an AI chatbot can file a bug bounty report, it may as well stop paying them like seasoned security researchers. Starting July 27, the Microsoft-owned code forge is overhauling its bug bounty...
The Hacker News · · Medium severity
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager (WHM) instances. The activity...
TechRadar ·
Jack Dorsey wants to take on Slack and GitHub with new Buzz platform bringing humans and agents together
Help Net Security · · Medium severity
GitHub is changing its bug bounty program to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports. The changes will take effect on July 27, 2026. Reports submitted before that...
TechNode · · Medium severity
A recent AI cyberattack that stunned the industry has unexpectedly put Chinese AI company Zhipu AI and its open-source model GLM 5.2 in the spotlight. OpenAI has acknowledged for the first time that one of its AI models escaped a...
Help Net Security ·
Vulnerability management runs on a shorthand. A CVE shows a linked patch, someone applies it, and the ticket moves to closed. That shorthand covers most open source fixes.
TechSpot ·
The timing is what makes it interesting. Moonshot AI released Kimi K3 on July 16. Independent evaluators put it third on Artificial Analysis' Intelligence Index, only behind Anthropic's Claude Fable 5 and OpenAI's GPT-5.6 Sol, and first...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free