UPDATED
TNW · · Medium severity
LiteLLM says hackers took the keys they needed from its own logs. They used them to publish a poisoned version of its software on Wednesday. The open-source AI gateway explained it in an incident report.
Tech.eu ·
European companies have been called on to play a more active role in developing open source technology to help sovereignty flourish. This was one of the key themes emerging from the Open Source Summit Europe , which took place in...
SiliconANGLE ·
The Agentic AI Foundation, a consortium that maintains open-source artificial intelligence tools, today took four new projects under its wing. The technologies were donated by OpenAI Group PBC, Anthropic PBC, Hugging Face Inc. They...
Hackaday ·
If you’ve ever pulled apart a set of digital calipers, you’ve probably marvelled at the capacitive encoder that does all the measuring work. There’s nothing stopping you from using the same techniques yourself, as [Nick] demonstrates...
TechRadar ·
Claude flags nearly 500 worrying open source security issues — C, Java, and Python code all at risk as one flaw wasn't spotted for 21 years
Help Net Security · · Medium severity
Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving...
The Hacker News · · Medium severity
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's...
Hacker News ·
Hacker News ·
darkreading · · Medium severity
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
TNW ·
Anthropic pointed its Claude models at 25 widely used open-source projects and set them a different task: not finding individual bugs, but finding code that attackers can reach when they should not be able to. Claude flagged 493 such...
Hacker News ·
Hacker News ·
The Register ·
Generative AI is saving open source developers time while giving maintainers more rubbish to sift through, according to a Linux Foundation survey. Respondents estimated that a quarter of incoming pull requests – proposed code changes –...
Hacker News ·
Help Net Security · · Medium severity
OVHcloud, the French cloud computing and web hosting company, alerted customers that a hacker tampered with its open-source command-line interface (CLI) tool to spread information-stealing malware. OVHcloud CEO Octave Klaba disclosed...
TechNode ·
DeepSeek released DeepInfer, the inference framework behind its large-scale model services, on October 20. The framework supports Nvidia GPUs and Huawei Ascend processors and provides capabilities including distributed inference,...
Help Net Security · · Critical severity
DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One...
Help Net Security ·
Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units. Google also announced TPU support in the vLLM and SGLang serving engines, the TorchTitan training...
Hacker News ·
SiliconANGLE ·
Chinese artificial intelligence startup Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co. today open-sourced DeepInfer, the inference framework behind its own production services. The release takes on the cost of...
PYMNTS.com ·
DeepSeek has made its in-house inference framework, DeepInfer, fully open source, saying this will help make artificial intelligence more affordable. DeepInfer powers the company’s DeepSeek-V4.1-Flash model at scale with high throughput...
Hacker News ·
Gizmodo ·
Called DeepInfer, the platform could pull more American businesses towards Chinese open-source models.
Hacker News ·
BGR ·
Your MacBook goes to sleep when you close the lid, but you can change that default. This open-source app keeps your MacBook awake even with the screen closed.
Hacker News · · Medium severity
TNW ·
DeepSeek has open-sourced DeepInfer, the software it uses to run its AI models in production. The Chinese AI lab announced the release on X on Tuesday and published the code on GitHub under the Apache 2.0 licence. For now, it supports...
BleepingComputer · · Medium severity
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware.
Hacker News ·
Hacker News ·
TechNode ·
Ant Group released its Ming-3.0 speech model family on October 20, making five models available across speech synthesis, audio understanding and conversation, and speech recognition. Developers can use individual models or combine them...
Hacker News ·
Hacker News ·
The Hacker News · · Critical severity
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake...
PYMNTS.com ·
China’s DeepSeek has unveiled what it calls a faster and leaner version of its artificial intelligence model. The company describes the DeepSeek-V4.1-Flash-1017 model, announced Saturday (Oct. 17) as offering “[s]tronger benchmark...
TechRadar ·
Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master's and a PhD in sciences, which provided him with a solid foundation in...
Slashdot ·
"Cloudflare has acquired Deno, the company behind the [server-side] JavaScript and TypeScript runtime created by Ryan Dahl, the inventor of Node.js," Forbes reported last week. But Deno "has no future at Cloudflare, which will maintain...
Hackaday ·
Hand tracking in VR/AR can add a substantial amount of immersion and added interactivity. Unfortunately, most camera based tracking suffers when fingers get covered, intertwined, or simply out of view of the headset’s camera. What’s...
The Register ·
Node.js creator Ryan Dahl is sacrificing a battle to win the war … for server-side computing and allowing Node-replacement Deno to fall by the wayside. Last week, Cloudflare announced that it had purchased Dahl’s company Deno, which was...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free