Open Source News

930 stories · Updated every 5 minutes · Page 20 of 24

1. Chainguard, JPMorgan, BNY Team Up to Secure Open Source from AI Threats

   Infosecurity Magazine · 16 Jun 2026, 16:30 IST

   Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them

2. Microsoft turns to AWS for GitHub capacity amid Azure lawsuit

   CloudTech · 16 Jun 2026, 14:30 IST · Unconfirmed

   Microsoft is reportedly using AWS to add computing capacity for GitHub, following capacity issues on the coding platform. Business Insider reported that Microsoft is turning to Amazon to help address capacity issues at GitHub. The...

3. GitHub releases an open dataset for multilingual developer content

   Help Net Security · 16 Jun 2026, 12:25 IST · Medium severity

   Developers coordinate code across README files, issue threads, and pull request discussions. Much of that exchange happens in English, and a large share happens in other languages. GitHub has released a dataset built to help researchers...

4. EXANTE launches €1M fund to support critical open-source infrastructure

   Tech.eu · 16 Jun 2026, 12:30 IST

   Global prime broker EXANTE has launched Gecko Fund , a €1 million grant programme designed to support open-source software projects that play a critical role in trading systems, financial data infrastructure, and broader financial...

5. Open-source Discord alternatives: What Stoat and Element actually fix

   Engadget · 15 Jun 2026, 21:00 IST

   Hosting your own group chat could let you avoid a lot of drama.

6. Open-source CI/CD abuse detector guards against stolen credential attacks

   Help Net Security · 15 Jun 2026, 11:00 IST · High severity

   CI/CD Abuse Detector is an open-source project that uses a large language model to flag suspicious changes to continuous integration and continuous deployment pipelines, workflows, and automation configurations. The repository contains...

7. Vintage AMD R600 Graphics Driver Sees Code Cleanups Thanks To GitHub Copilot

   Slashdot · 14 Jun 2026, 22:04 IST

   Phoronix reports: The AMD R600 Gallium3D driver saw 59 commits [last] Sunday to Mesa 26.2. Making this code restructuring and code cleaning all the more notable is that the improvements to this old AMD Radeon graphics driver was done in...

8. This Open-Source App Lets You Use Your Whoop Band Without A Subscription Fee

   BGR · 13 Jun 2026, 04:47 IST

   Whoop's subscription model is a sticking point for a lot of users. An open-source app is now offering a way to keep using the band without the recurring fees.

9. Microsoft’s open source tools were hacked to steal passwords of AI developers

   TechCrunch Security · 09 Jun 2026, 01:33 IST · Medium severity

   Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

10. GitHub to Update npm to Thwart Software Supply Chain Attacks

    Infosecurity Magazine · 12 Jun 2026, 18:30 IST · Critical severity

    NPM, part of GitHub, announced a new version of the npm package manager with several security improvements, including disabling install scripts

11. GitHub finally pulls the plug on automatic install script execution for npm

    CSO Online Security · 11 Jun 2026, 06:16 IST · Medium severity

    The ability for attackers to leverage automatic install script execution in npm will finally come to an end when expected changes arrive from GitHub in July. Coders will still be able to enable the function, but the default setting will...

12. GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

    The Hacker News · 11 Jun 2026, 11:53 IST · Critical severity

    GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat attack techniques that abuse the...

13. ‘Open source should rest on transparency, not deception’: Euro-Office ‘sovereignty’ claims questioned in scathing open letter by LibreOffice maintainers

    IT Pro · 10 Jun 2026, 15:51 IST

    https://cdn.mos.cms.futurecdn.net/Y5vrV2V98Np6jHAGmAtCd3.jpg

14. The UK is betting big on the power of open source AI

    IT Pro · 11 Jun 2026, 16:26 IST

    https://cdn.mos.cms.futurecdn.net/aWfskavxoVSMDy6cDWtYmJ.jpg

15. TestSprite launches an open-source command-line tool to help AI agents check their own work

    SiliconANGLE · 11 Jun 2026, 17:30 IST

    Autonomous artificial intelligence-powered software testing tool TestSprite Inc. today announced that the company has open-sourced its command-line interface tool that allows AI coding agents to verify their own work. As the AI coding...

16. Xiaomi's new open source, agentic AI coding harness MiMo Code beats Claude Code at ultra-long, 200+ step tasks

    VentureBeat · 12 Jun 2026, 04:44 IST

    Xiaomi's MiMo AI team has open-sourced MiMo Code V0.1.0 , a terminal-native AI coding assistant that the Chinese electronics giant says outperforms Anthropic's Claude Code on key agentic coding benchmarks, especially on long-horizon,...

17. Microsoft’s open-source SkillOpt automatically upgrades AI agent skills without touching model weights

    VentureBeat · 12 Jun 2026, 05:07 IST

    Agent skills have become an important part of real-world AI applications, providing a mechanism — a set of instructions saved in a folder of text-based markdown (.md) files, usually — for models to adapt to specific enterprise use cases...

18. Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure process

    The Record by Recorded Future · 04 Jun 2026, 19:07 IST · Medium severity

    The security researcher, Ammar Askar, released the new proof-of-concept exploit on his personal blog — alongside the public tracker for issues in VS Code — giving a GitHub security contact roughly one hour's notice beforehand.

19. Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS

    The Hacker News · 04 Jun 2026, 15:21 IST · Medium severity

    Cybersecurity researchers have flagged a large-scale operation that impersonates open-source and freeware projects to funnel unsuspecting users through a Traffic Distribution System (TDS) and deliver malware families like Remus Stealer,...

20. OSS Resistance: it's time companies treat open source maintenance as real work

    Tech.eu · 04 Jun 2026, 14:49 IST

    Mike McQuaid has a message for open source maintainers at profitable companies: "Stop asking permission to fix what your employer already depends on." Open source software underpins critical infrastructure across the global economy,...

21. VS Code Vulnerability Allows One-Click GitHub Token Theft

    SecurityWeek · 04 Jun 2026, 13:44 IST · Medium severity

    A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance. The post VS Code Vulnerability Allows One-Click GitHub Token Theft appeared first on SecurityWeek .

22. Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine

    The Register · 04 Jun 2026, 12:39 IST

    There's a lot of fear surrounding the bug-finding capabilities of super-advanced AI models like Anthropic's Mythos and OpenAI's GPT 5.5-Cyber. But attackers are already using free, publicly available LLMs to hijack networks and worm...

23. Hole in GitHub’s browser-based VSCode editor could lead to stolen token

    CSO Online Security · 04 Jun 2026, 07:10 IST

    A vulnerability in GitHub’s browser-based VSCode editor could lead to the theft of a developer’s token under certain circumstances, says a researcher. The issue, revealed this week in a blog by Ammar Askar , has apparently been already...

24. One click on GitHub.dev is all it takes to hand over your private repositories

    TNW · 04 Jun 2026, 01:27 IST

    Every developer who has ever pressed the period key on a GitHub repository, launching the convenient browser-based VS Code editor known as GitHub.dev, has unknowingly accepted a bargain. In exchange for a lightweight coding environment,...

25. Google's new open source Gemma 4 12B analyzes audio, video — and runs entirely locally on a typical 16GB enterprise laptop

    VentureBeat · 04 Jun 2026, 00:19 IST

    While many AI open source model providers are pursuing larger and more powerful models, Google is still giving attention to the smaller, more local side of the market. Today, the tech giant released Gemma 4 12B , an...

26. GitHub just switched Copilot to metered billing, and developers are watching months of credits vanish in a single day

    TechSpot · 03 Jun 2026, 19:48 IST

    Back in April, the company said it would move all Copilot plans to a usage-based system that bills users based on actual AI consumption, measured in tokens, starting June 1. Under the old setup, subscribers worked from a pool of...

27. Microsoft Build: Surface RTX Spark Dev Box, Coreutils for Windows, air-gapped GitHub and more

    The Register · 03 Jun 2026, 19:00 IST

    Microsoft’s Build event is under way in San Francisco, USA, with the expected focus on agentic AI but also a few surprises, such as Unix-style Coreutils for Windows. CEO Satya Nadella presented Project Solara, based on future devices...

28. One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens

    The Hacker News · 03 Jun 2026, 18:28 IST · Medium severity

    Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to steal a user's GitHub token. "Just by clicking a link, it's possible for an attacker to steal a GitHub...

29. DeepSeek Nears Deal to Raise $7.4 Billion for Open-Source AI

    PYMNTS.com · 03 Jun 2026, 18:06 IST · Unconfirmed

    Chinese AI startup DeepSeek is reportedly nearing a deal to raise $7.4 billion. That’s according to a report Wednesday (June 3) by Bloomberg News, which says the financing would mark one of China’s largest ever startup funding rounds....

30. GitHub Copilot Users React To New Usage-Based Pricing System

    Slashdot · 02 Jun 2026, 20:30 IST

    An anonymous reader quotes a report from Ars Technica: In April, GitHub announced that it was moving subscribers from request-based billing to a usage-based model for its AI-powered Copilot service. As that new pricing model goes into...

31. California Wants To Exclude Linux and Other Open Source Systems From New Age Checks

    Ghacks Technology News · 27 May 2026, 16:29 IST

    A proposed change to California's Digital Age Assurance Act aims to exempt open source operating systems from age verification rules set to take effect on January 1, 2027. The amendment, published on May 18, 2026, introduces language...

32. GitHub Copilot Usage-Based Billing Takes Effect, Drawing Developer Backlash Over Rapid Credit Depletion

    Ghacks Technology News · 02 Jun 2026, 19:47 IST

    GitHub Copilot's new usage-based billing started on June 1, replacing the previous flat-rate subscription. Developers have reported using large portions of their monthly credits within hours, leading to widespread complaints and some...

33. Open source app could finally free WHOOP users from expensive subscriptions

    Android Authority · 03 Jun 2026, 01:15 IST

    TL;DR WHOOP fitness trackers require a mandatory subscription to use, starting at $199 a year. A new open source app called Goose attempts to access WHOOP tracker data without requiring a subscription at all. Right now, Goose is more a...

34. CrowdStrike and Google take down botnet used by hackers to target open source software developers

    TechCrunch Security · 27 May 2026, 22:29 IST · Medium severity

    Cybercriminals used the Glassworm botnet to infect open source software projects with malware, and in turn hack the developers and companies that use that software.

35. Supply Chain Compromises Impact Nx Console and GitHub Repositories

    CISA Alerts · 28 May 2026, 17:30 IST · High severity

    CISA is prioritizing the response to multiple emerging software supply chain intrusion campaigns targeting developer ecosystems Continuous Integration/Continuous Development (CI/CD) pipelines. These recent incidents, including the...

36. Fake software on GitHub and SourceForge distribute Deno RAT

    Malwarebytes Labs · 26 May 2026, 18:37 IST · Medium severity

    During our threat hunting activities, we found fake installers and plugins impersonating popular software including ChatGPT, Claude, AutoTune, and Kontakt on GitHub and SourceForge distributing a Deno backdoor known as DinDoor ....

37. AI-Generated npm Malware Leaks Its Own GitHub Token

    Infosecurity Magazine · 29 May 2026, 13:40 IST · Medium severity

    Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator

38. Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

    The Hacker News · 28 May 2026, 19:23 IST · Critical severity

    Microsoft has come out strongly in favor of Coordinated Vulnerability Disclosure (CVD), urging the research community to share their findings and give affected vendors an opportunity to better understand the impact and address them...

39. IBM and Red Hat believe they have the answer to open source security risks

    IT Pro · 29 May 2026, 15:49 IST

    The IBM booth pictured during the RSA Conference in San Francisco, California, US, on Wednesday, April 26, 2023

40. Everything you need to know about Euro-Office, Europe's open source alternative to Microsoft 365 and Google Workspace – including features, launch dates, and how to access it

    IT Pro · 01 Jun 2026, 16:59 IST

    European Union (EU) concept image showing flag on a digitized background with ripples flowing out from 12 stars.