Open Source News

929 stories · Updated every 5 minutes · Page 19 of 24

1. You didn't vibe code it, you stole it from open source&enterprise-licensed code

   Hacker News · 25 Jun 2026, 17:53 IST

2. Zambia Launches National Spatial Data Infrastructure Policy and Geoportal, Built on Open-Source Software

   Space in Africa · 18 Jun 2026, 15:39 IST

   The SMART Zambia e-Government Division has launched the Zambia National Spatial Data Infrastructure (ZNSDI) Policy alongside a new national geospatial […] The post Zambia Launches National Spatial Data Infrastructure Policy and...

3. Bohemia Interactive: Cold War Assault Remastered Source Code on GitHub

   Hacker News · 23 Jun 2026, 03:22 IST

4. Best practices for AI in open-source work

   Help Net Security · 25 Jun 2026, 10:30 IST

   Free and open source software developers us AI coding assistants such as Claude Code, Copilot CLI, Antigravity, and OpenCode in their daily work. The Software Freedom Conservancy responded to that trend with a set of recommendations for...

5. This open source app unlocks the Fitbit Air’s premium features at no cost

   Android Authority · 24 Jun 2026, 21:19 IST

   TL;DR A Fitbit Air user has built an open-source, free app that provides features reserved for the $10/month Google Health Premium subscription. Coincidentally, another developer is building a similar product with the same name. Google...

6. Sentient Foundation launches $42M program to back open-source AGI builders

   TNW · 24 Jun 2026, 19:26 IST

   For the past several years, the artificial intelligence industry has been moving toward an uncomfortable reality: the most powerful models, infrastructure, and capabilities are increasingly concentrated in the hands of a small number of...

7. Developer resource Swift Package Index to stay open source after Apple acquisition

   AppleInsider · 24 Jun 2026, 19:13 IST

   The Swift Package Index is no longer independent as Apple has taken control, but it will remain an open source search engine for third-party code. Swift icon - image credit: Apple It's now a startling 12 years since Apple launched its...

8. Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

   The Hacker News · 24 Jun 2026, 18:18 IST

   Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains. The "critical exploitable pattern" has been codenamed Cordyceps by Novee...

9. Open AI steps forward to strengthen open source security... ‘Patch the Planet’ project launched

   CIO.com · 24 Jun 2026, 13:17 IST

   OpenAI has teamed up with cybersecurity company Trail of Bits to launch an AI-based program to find and fix vulnerabilities in widely used open source software. This is a measure to respond to the increasing security risks faced by...

10. Praxen: Open-source AI agent behavior verification

    Help Net Security · 24 Jun 2026, 11:00 IST

    Praxen is an open-source tool with a simple job: it checks whether an AI agent does what it claims to do. The tool takes an agent’s declared policy, looks at how the agent operates, and points out every spot where the two drift apart....

11. Upbound open-sources Modelplane to optimize inference clusters

    SiliconANGLE · 24 Jun 2026, 06:01 IST

    today released Modelplane, a new open-source tool for managing artificial intelligence inference clusters. San Francisco-based Upbound is backed by $69 million from Alphabet Inc.’s GV fund, Intel Capital and others. It’s best known as...

12. Swift Package Index joins Apple, pledges to remain open source

    9to5Mac · 24 Jun 2026, 04:29 IST

    Community-run Swift package search engine and metadata index Swift Package Index is joining Apple, but says little is changing for developers in the near term.

13. Ukraine open sources Russian military hardware secrets to 'protect the entire civilized world': TrophyLab hosts specs, blueprints of more than 100 Russian equipment, and you can even request samples

    TechRadar · 23 Jun 2026, 23:45 IST

    https://cdn.mos.cms.futurecdn.net/nwRLdPUNG4rWu4Y6nthHDV.png

14. The maker of ChatGPT wants to make open-source projects less of a security bargain

    Digital Trends · 23 Jun 2026, 21:37 IST

    As AI tools flood open-source maintainers with low quality bug reports, OpenAI's new Patch the Planet initiative aims to filter out the noise and fix real threats.

15. GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

    The Hacker News · 23 Jun 2026, 19:52 IST

    GitHub is moving to strengthen software supply chain security by updating "actions/checkout" to block pwn request attacks that exploit the risky use of the "pull_request_target workflow" trigger to run malicious code with the workflow's...

16. Exabeam launches Praxen, an open-source tool to verify AI agent behavior

    SiliconANGLE · 23 Jun 2026, 18:30 IST

    Security intelligence and management solutions company Exabeam Inc. today introduced Agent Behavior Verification, a pre-deployment security discipline for artificial intelligence agents, and released Praxen, an open-source tool that...

17. OpenAI rolls out AI-led push to fix open-source software flaws

    CSO Online Security · 23 Jun 2026, 16:02 IST

    OpenAI has launched a program with cybersecurity firm Trail of Bits to use AI to find and fix vulnerabilities in widely used open-source software, as enterprises face growing risks from flaws buried deep in their software supply chains....

18. OpenAI's new Daybreak⁠ initiative will help open-source projects fend off bugs

    Engadget · 23 Jun 2026, 14:44 IST

    OpenAI has launched Patch the Planet, a new initiative part of its Daybreak cybersecurity program.

19. Sniff out stale AI override advice with this open source CLI

    The Register · 23 Jun 2026, 05:47 IST · Critical severity

    The JavaScript development ecosystem may be a security nightmare, but it's also ripe for improvement. One such tool is the CVE Lite CLI, a free open source dependency scanner that helps reduce the risk of software supply chain attacks....

20. OpenAI launches new initiative to help find and patch open-source bugs

    TechCrunch · 23 Jun 2026, 05:41 IST

    OpenAI is attempting to tackle the security issues of the open source software community.

21. GitHub Actions hardens checkout security to block ‘pwn request’ attacks

    CSO Online Security · 23 Jun 2026, 05:19 IST · Medium severity

    Stung by a surge in cyberattacks that have run amok in developer environments, GitHub has strengthened the security of actions/checkout to block ‘pwn request’ attacks that exploit insecure use of the pull_request_target workflow trigger...

22. OpenAI Launches Full-Scale Effort to Patch Open Source Bugs as It Takes on Anthropic’s Mythos

    Wired Security · 22 Jun 2026, 22:30 IST

    Amid concerns about AI models’ cybersecurity capabilities, OpenAI revealed an improved version of GPT-5.5-Cyber and its “Patch the Plant” initiative to fix open source software bugs.

23. SpaceX inks compute deal with Reflection AI, an open-source AI lab

    TechCrunch · 22 Jun 2026, 22:21 IST

    Reflection AI will pay $150 million a month beginning July 1, 2026 through 2029 for immediate access to Nvidia's latest GB300 AI chips and supporting hardware across SpaceX's Colossus 2 data center near Memphis, Tennessee.

24. How to automate workflows using open-source AI agents

    TechRadar · 22 Jun 2026, 21:17 IST

    https://cdn.mos.cms.futurecdn.net/cD9joj4H54xYmooW8re3vU.png

25. Scammers Use Fake GitHub Stars, VirusTotal Reviews to Spread Crypto Clipper

    HackRead · 22 Jun 2026, 18:17 IST · Medium severity

    A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets.

26. Agent Beacon: Open-source telemetry layer for AI agents

    Help Net Security · 22 Jun 2026, 11:00 IST

    AI coding agents such as Claude Code, Codex CLI, Cursor, and Claude Cowork run on developer laptops, CI jobs, cloud environments, where they edit files, run commands, and call outside tools. Beacon, an open-source project from Asymptote...

27. Love NotebookLM but hate giving Google your data? I found a great open-source alternative

    Android Authority · 20 Jun 2026, 17:30 IST

    Credit: Shimul Sood / Android Authority I personally love NotebookLM, though it’s far from the only tool I’ve used for summarizing information or extracting research data. It is arguably the very best, though, as pretty much every...

28. Retro gaming fans are the new target for fake GitHub malware

    Malwarebytes Labs · 18 Jun 2026, 16:57 IST · Medium severity

    Retro gaming fans should be careful with GitHub projects that claim to be tools or plugins for their consoles. Attackers can disguise ordinary computer malware as homebrew software, and the technique works against any retro platform...

29. Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware

    Help Net Security · 19 Jun 2026, 17:41 IST · Medium severity

    A cryptocurrency-stealing malware campaign used inflated GitHub activity, software reviews, YouTube tutorials and favorable VirusTotal comments to make malicious trading and gambling tools appear trustworthy, Check Point researchers...

30. Fake GitHub Stars and AI Videos Mask a Crypto Clipper

    Infosecurity Magazine · 18 Jun 2026, 20:30 IST

    A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos

31. F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

    The Hacker News · 18 Jun 2026, 23:02 IST · Critical severity

    F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. The vulnerabilities are listed below - CVE-2026-42530 (CVSS v4 score:...

32. Vercel debuts eve open source agent framework, tries to fix shadow AI with Passport

    The Register · 19 Jun 2026, 18:05 IST

    Vercel introduced an open source agent framework called eve at its Ship event in London this week, along with other new features including Passport, an attempt to put employee apps created with AI under enterprise control. Agents are...

33. SUSE “The core of Sovereign AI is technology selection…The role of open source in the AI ​​era is growing”

    CIO.com · 19 Jun 2026, 11:29 IST

    Sususe defined Sovereign AI not simply as control over data or AI models, but as an environment in which vendor dependency is minimized across infrastructure such as cloud, operating system (OS), AI model, and Kubernetes platform, and...

34. Epic Games Announces Lore Open-Source Version Control System

    Slashdot · 17 Jun 2026, 22:30 IST

    Epic Games has released Lore, an MIT-licensed version control system written in Rust and designed specifically for "games and entertainment purposes with large file sizes," reports Phoronix. From the report: While there is Git LFS for...

35. Serverless Phishing Kit on GitHub Targets Mexican Banks

    Infosecurity Magazine · 17 Jun 2026, 19:30 IST

    GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials

36. The Chainguard Athena coalition already shipped 2,000 patches across 500 open source projects

    Help Net Security · 17 Jun 2026, 15:12 IST · Critical severity

    Chainguard launched Athena, an industry coalition that pools open source vulnerability findings and remediates them under embargo before public disclosure. The group went live with more than two dozen member organizations. Founding...

37. GitHub dismissed security reports on flaws now exploited by supply-chain worm, researchers say

    The Record by Recorded Future · 17 Jun 2026, 04:30 IST

    GitHub rejected two formal vulnerability reports identifying design flaws that researchers say are enabling variants of the Shai-Hulud supply-chain worm to infect and compromise hundreds of software packages and developer accounts...

38. Microsoft AntiSSRF open-source library helps block server-side request forgery

    Help Net Security · 17 Jun 2026, 11:00 IST · Medium severity

    AntiSSRF is an open-source code library from Microsoft that validates URLs and network connections to reduce server-side request forgery (SSRF) risks in web applications. It supports .NET and Node.js applications and is distributed...

39. Microsoft forced to turn to AWS to boost GitHub cloud capacity following AI demand surge

    TechRadar · 16 Jun 2026, 19:50 IST

    https://cdn.mos.cms.futurecdn.net/GV8qRsHBkpSAQxiYKjTt6H.jpg

40. Chainguard, JPMorgan, BNY Team Up to Secure Open Source from AI Threats

    Infosecurity Magazine · 16 Jun 2026, 16:30 IST

    Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them