UPDATED
Help Net Security · · Medium severity
Legit Security has announced an expansion of its Agentic Remediation capability to cover vulnerabilities found in open-source dependencies, not just first-party code, enabling development teams to move from vulnerability detection to a...
TNW ·
DeepSeek has open-sourced a set of programming tools for Huawei’s Ascend AI chips. They include a version of TileLang, a programming language DeepSeek offers as a simpler alternative to Nvidia’s CUDA. The Chinese AI lab announced the...
Engadget ·
Movie studios are turning to the horror fiction site SCP Foundation and showing how dealing with that community can go right, and wrong.
Phoronix ·
Rob Clark, who originally started working on the reverse-engineering Freedreno and MSM DRM graphics driver projects prior to even being employed by Qualcomm, presented this week at XDC 2026 Toronto around all the recent efforts they...
SecurityWeek · · Medium severity
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek .
Phoronix ·
As part of Valve's work on developing the Steam Frame VR headset, they worked on foveated rendering support for the Mesa Turnip driver that supports the Qualcomm Adreno graphics with open-source Vulkan API support. Foveated rendering is...
Hacker News ·
Hacker News ·
Hackaday · · Medium severity
If you’re reading Hackaday there’s pretty good odds you’re at least somewhat fond of Star Trek. We’d bet good money most of you would quit your jobs today if a Starfleet recruiter showed up. That’s something you’d have in common with...
DQ : Latest Posts ·
DeepSeek has expanded its work with Huawei by open-sourcing six software components optimised for the Ascend AI platform. The projects span programming, computation, communication, attention, kernels, and data processing. The...
Phoronix ·
With the third quarter wrapping up, here is a look back at the most interesting content on Phoronix over the past three months...
BleepingComputer · · High severity
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data.
Phoronix ·
Edison Design Group has open-sourced their EDG C/C++ front-end that has been known in the commercial world for its extensive dialect support and other features. The EDG C++ front-end has been used by the likes of Intel C++ Compiler...
HackRead · · Medium severity
Legit Security launches agentic remediation for open-source dependency vulnerabilities
Help Net Security ·
When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow Labs. Diagram showing how AI agents leak screenshots to public repos...
The Hacker News ·
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at...
Help Net Security ·
OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Shadow...
The Register ·
Sure, Jev is cheap and quick to respond to queries, but you know what would be even better? How about a local student model that learns from your Jev requests and runs familiar ones on your hardware instead? Jevstiller is an open source...
TNW ·
The Paris-based company Marble, which develops open-source software for fraud detection and anti-money laundering compliance, raised €6.5 million in its Series A round, with Smartfin as the lead investor. This brings the total funding...
Help Net Security ·
GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent, and used them to find and report more than 20 vulnerabilities in Android apps. Two...
Help Net Security ·
Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts...
TechRadar ·
Rahim Amir is a UAE-based tech writer who enjoys building PCs as much as he enjoys writing about them. He has been professionally writing about PC hardware since 2023, focusing on buyer’s guides, hardware reviews, and sponsored content...
Wired ·
In the wake of a series of high-profile AI safety incidents, Nvidia is introducing a new software tool that helps keep agents from escaping containment.
The Register ·
It's hard to make big sheds symbols of oppression, but the datacenter industry's having a jolly good crack at it. Its big boxes of semi-sentient sand are increasingly seen as satanic sandcastles, environmental disasters that inflict...
TechNode ·
Huawei’s Ascend Tribe has released the pretraining, supervised fine-tuning and post-training reinforcement-learning code for its openPangu-2.0 model family. The code is designed for Huawei’s Ascend-based training ecosystem. The newly...
Help Net Security ·
Authorizer is an open-source server for sign-in and access control in web and mobile apps. Teams run it on their own infrastructure and keep user accounts in a database they choose. Its maintainers have built a permissions engine and an...
Hacker News ·
BleepingComputer · · Medium severity
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code.
Hacker News ·
The Hacker News · · Medium severity
Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are...
Hacker News ·
The Register ·
A crook has been using three open source AI harnesses to target hundreds of online retailers and other companies, swiping more than 600,000 credit card records and installing card-stealing skimmers - and all at trivial cost. AI security...
Hacker News ·
Hacker News ·
Hacker News ·
TechRadar ·
Monica is a journalist with over a decade of experience in covering technology. She writes about the latest developments in computing, which means anything from computer chips made out of paper to cutting-edge desktop processors. Her...
Hacker News ·
Hacker News ·
TNW ·
Clément Delangue is telling the UN Security Council that open-source AI helped Hugging Face defend itself during the AI agent attack it suffered in July. Speaking to the Council today, he argues the biggest danger is not powerful AI but...
The Register ·
Decision-making AI model Jev has found another job: helping a Chrome extension identify and flag low-value writing on LinkedIn. AI enthusiast, author, and business consultant Tom Frazier released Slop Mop as a Chrome extension on...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free