Ornith-1.0: self-improving open-source models for agentic coding
Hacker News ·
Hacker News ·
SiliconANGLE ·
Application observability startup groundcover Ltd. today announced a major expansion of Agent Mode that lets artificial intelligence agents act on a team’s observability data across the development tools they already use. The update...
Help Net Security ·
Penetration testing has long run on expert time, with specialists spending days probing a network or web application by hand. Manual engagements stretch across weeks, expert consultants run into thousands of dollars a day, and results...
Hacker News · · Medium severity
Hacker News ·
Hacker News ·
Hacker News ·
BleepingComputer · · Medium severity
An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is invisible to both security agents and human reviewers.
Hacker News ·
SiliconANGLE ·
is joining an initiative that IBM Corp. and its Red Hat unit launched in May to fix open-source software vulnerabilities. The companies announced the move today.
Kubernetes Blog ·
AI has really changed the game around software development. More people are leveraging AI than ever to contribute patches to projects they use. To me, this is a good thing as more folks will contribute patches rather than fork or not...
Hacker News ·
TechCrunch ·
Corgi became embroiled in controversy when Papermark accused it of stealing its software. Corgi says it did not, raising new questions about vibe coding.
Hacker News ·
darkreading ·
The Open Source Sustainability Initiative's goal is to help enterprises manage and secure aging open source projects while maintaining regulatory compliance.
BetaKit ·
The Linux Association of Canada is launching two initiatives this month that it believes will strengthen the open-source technology ecosystem in Canada. The news: The newly created group has launched two new initiatives aimed at...
Cybersecurity Dive - Latest News · · Medium severity
The emergence of frontier AI models has increased the speed and capabilities of malicious hackers.
Help Net Security ·
Open source software projects are getting a new framework for handling security vulnerabilities as AI shortens the time between flaw discovery and exploitation. The Linux Foundation has launched Akrites, an industry initiative that...
La santísima trinidad del 'cloud': muchos logos, poco gobierno | CIO ·
France is working to reduce its dependence on non-European technology providers in the public sector, and to do so it has opted for open source software, which is acquiring an increasingly prominent role in the region. One of the...
SecurityWeek ·
It will provide the tools and channels to report, patch, and disclose open source software vulnerabilities. The post Linux Foundation Unveils New Open Source Security Project Akrites appeared first on SecurityWeek .
The Hacker News · · Critical severity
Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised a new set of npm packages, even as it has propagated to the Go...
Ubuntu blog ·
Open source software (OSS) is a cornerstone of modern technology. According to the Linux Foundation , it powers up to 90% of software tools used today. Unlike proprietary software, OSS is developed collaboratively, meaning its code is...
AlienVault OTX · · Critical severity
A sophisticated supply chain attack campaign linked to Mini Shai-Hulud, Miasma, and Hades malware has compromised LeoPlatform npm packages, GitHub Actions workflows, and the Verana Blockchain Go module. The attack employs binding.gyp...
Hacker News ·
OpenAI News ·
OpenAI introduces Patch the Planet, a Daybreak initiative helping open-source maintainers find, validate, and fix vulnerabilities with AI and expert review.
Phoronix ·
The Linux Foundation along with others like Amazon, Anthropic, OpenAI, NVIDIA, Microsoft, Red Hat, and others have joined forces to launch Akrites. The Akrites project is aiming to help defend critical open-source software from the...
AI coding token costs are on track to rival human payroll | InfoWorld · · Medium severity
Stung by a surge in cyberattacks that have run amok in developer environments, GitHub has strengthened the security of actions/checkout to block ‘pwn request’ attacks that exploit insecure use of the pull_request_target workflow trigger...
AI coding token costs are on track to rival human payroll | InfoWorld ·
OpenAI has launched a program with cybersecurity firm Trail of Bits to use AI to find and fix vulnerabilities in widely used open-source software, as enterprises face growing risks from flaws buried deep in their software supply chains....
AI coding token costs are on track to rival human payroll | InfoWorld ·
Unless you’ve been living under an old woodpile in your backyard, you have certainly seen how agentic coding is rocking the software development world. Things are happening fast and furious, and keeping up is practically a full-time...
AlienVault OTX ·
A malicious npm package named 'node-fetch-utils' was discovered masquerading as a legitimate fetch helper utility. The package declares a remote tarball dependency from GitHub that executes upon installation. It runs an obfuscated...
The Pragmatic Engineer ·
Hi, this is Gergely with a bonus, free issue of the Pragmatic Engineer . This issue is the entire The Pulse issue from the past week, which paying subscribers received seven days ago. This piece generated quite a few comments across...
The Pragmatic Engineer ·
Hi, this is Gergely with a bonus, free issue of the Pragmatic Engineer Newsletter. In every issue, I cover Big Tech and startups through the lens of senior engineers and engineering leaders. Today, we cover one out of four topics from...
The Pragmatic Engineer ·
Hi, this is Gergely with a bonus, free issue of the Pragmatic Engineer Newsletter. In every issue, I cover Big Tech and startups through the lens of senior engineers and engineering leaders. Today, we cover one out of four topics from...
Ubuntu blog ·
As designers working at Canonical, we’re always thinking about open source. We believe that encouraging more designers to contribute to open source benefits everyone, from the project maintainers to the end users themselves. In the 2025...
Ubuntu blog ·
Ubuntu Summit 26.04 has officially drawn to a close, but the energy from our global community is still buzzing – in the comments section, on social media, and in news reports. Whether you joined us in person or tuned in from across the...
Help Net Security ·
Organizations that run open-weight models on hardware they own operate GPU fleets spread across clouds, neoclouds, and on-premise data centers. Each fleet handles model placement, replica scaling, infrastructure provisioning, weight...
Slashdot · · Medium severity
BrianFagioli writes: The Linux Foundation has announced Akrites, a new initiative to coordinate vulnerability disclosure and remediation for critical open source software as AI dramatically speeds up vulnerability discovery. Founding...
Hacker News ·
Tech-Economic Times ·
The Italian tech company Domyn plans to unveil an extensive, fully open-source AI model in less than a year, putting it on track to compete with top-tier 'frontier' systems. With the backing of the European Commission, this endeavor is...
The Register ·
The Swift Package Index (SPI), a search engine for open source packages for the Swift programming language, is now part of Apple, though it will remain open source. Dave Verwer, who created SPI over six years ago along with Sven A....
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free