UPDATED
The Hacker News · · Medium severity
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account...
GeekWire ·
GitHub COO Kyle Daigle, who now also leads developer marketing for all of Microsoft, speaks at GitHub Universe last year. (Microsoft Photo) GeekWire is profiling over the next few weeks some of the people and teams that are shaping the...
The Hacker News ·
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find...
Engadget ·
Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner.
TechRadar ·
In open source cybersecurity, AI is kind of a problem — but it can also be a solution
Phoronix ·
Over the past few months NVIDIA has been developing Boro as a new AI-assisted kernel development CLI written in Rust and focused on local AI for enhancing efficiency for kernel development...
Help Net Security ·
Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws,...
Tech.eu · · Medium severity
Nvidia has defended a coalition created to develop and share tools for AI safety and cyber defence and avoid a repeat of the OpenAI Hugging Face hack, when questioned that participants would sidestep it in an AI land grab. The US chip...
The Register ·
Responding to unprecedented demand from AI agents, GitHub is rebuilding its Git storage architecture from scratch. Early tests with the new architecture show a promising 35x write improvement in internal tests. GitHub will need a...
The Register ·
Anthropic has launched an effort to help people patch the software vulnerabilities exposed by its own Project Glasswing. If that sounds like a careless camper starting a wildfire and later funding a fire department, well, that's one way...
SiliconANGLE ·
Anthropic PBC today launched a program that brings its frontier models and onsite engineers to the security companies protecting power grids, water systems and other critical infrastructure. OSS Scanner, launched with it, offers...
The Verge ·
Anthropic's offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner . It says open-source projects that opt-in will get "thorough, periodic security scans by our strongest models...
Hacker News ·
BleepingComputer · · Medium severity
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.
TechRadar ·
Digital sovereignty has become Europe’s top priority — here's how open source is helping pave the way
Forrester Blog ·
At Open Source Summit Europe 2026, one message surfaced repeatedly: organizations and governments that merely consume open-source remain dependent on others to shape their future. Those that govern, maintain, secure, and sustain...
Tenable Research ·
Community-built AI agents, skills, and MCP servers are landing in SOC workflows fast. Here’s what the Exchange Inspector tests before a listing earns its vetted tag on the CyberAgents Exchange. Three tools have already passed.
Hacker News ·
Tahawul Tech ·
Nvidia recently highlighted work to help operators rethink dependence on closed AI systems. The company went on to promote open-source models to give carriers direct control over network automation and customer workflows. In a blog,...
Help Net Security · · Medium severity
Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and open-source...
Help Net Security ·
GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push...
IT Pro ·
IBM and Red Hat report hundreds of open source fixes with Lightwell Clearinghouse scheme
Phoronix ·
As an interesting demonstrator for the power of AI and potentially pressing legal challenges, Claude Code and AI agents have created "open-source, clean-room reimplementation" versions of Adobe Photoshop, Adobe Premier, and Adobe...
Ars Technica ·
For a while, those hoping to avoid the difficulty and expense of dealing with Adobe's Creative Suite have been able to use several free and/or open-source alternatives that replicate some or all of those capabilities. Now, one developer...
The Register ·
When OpenAI introduced dots last month, it pitched them as "always-on agents" running in their own cloud computer, but that may be overstating the readiness of the technology and of the people trying to use it. Presently, multiple users...
TechRadar ·
Rahim Amir is a UAE-based tech writer who enjoys building PCs as much as he enjoys writing about them. He has been professionally writing about PC hardware since 2023, focusing on buyer’s guides, hardware reviews, and sponsored content...
The Register ·
AWS has offered multiple open-source strategies for holding AI agents accountable, and now it’s adding a full-on sandbox to this stack. Dubbed Strands Box, the new solution uses OS-level isolation and some of AWS’ other recent...
Hacker News ·
TNW ·
Alibaba co-founder and chairman Joe Tsai says open-source AI is the only way for Europe to become independent in the technology. He spoke to founders and investors on Wednesday at Wave by Vento in Turin, in a session titled “The Other...
Android Authority ·
TL;DR Thousands of users are reporting that GitHub is down. GitHub confirms there is an outage and it is investigating. Webhooks, actions, pull requests, and more are currently experiencing degraded performance.
Hacker News ·
TNW ·
The Dutch tax and customs administration has dropped its move to Microsoft 365 in the cloud. Its office software will instead run on servers it controls, together with European open source tools. State Secretary for Finance Eelco...
Hacker News ·
Help Net Security ·
Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like GitHub and Jira, and the model providers they send prompts to. The...
Gizmodo ·
If you're a professional mathematician, you might not be thrilled.
Hacker News ·
Hacker News ·
SiliconANGLE ·
Mistral AI SAS today opened access to Mistral Large 4, its most capable large language model to date. On launch, the LLM is available in public preview through the company’s cloud platform. Mistral plans to release the model’s weights...
ExtremeTech ·
Its reviewers are overwhelmed by AI-developed fixes, and it's just not possible to continue.
Hackaday ·
Recently [John Spicer] of the EDG C++ compiler front-end project announced that the project will be made open source, from now on managed by the non-profit C++ Alliance. Related source code can be found on the GitHub account . The...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free