Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
> Search
20 results for “open source”
Cyber Crime
SecurityLightwell Uncovers 400+ Java Library Flaws
IBM and Red Hat's Lightwell project has identified over 400 novel vulnerabilities in Java libraries, launching a clearinghouse service for customers to submit code for review.
AI & MLAWS Sandbox Targets Rogue AI Agents
AWS's new Strands Box uses OS isolation and custom policies to curb AI agent behavior, but security experts warn controls have gaps.
AI & MLAWS sandbox aims to tame rogue AI agents
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
SecurityRed Hat Batch-Fixes 400 Open-Source Flaws
Red Hat's Lightwell Clearinghouse exits pilot after remediating over 400 novel vulnerabilities in foundational Java libraries since June.
SecurityGoogle Pauses OSS Bug Bounty Submissions
Google has temporarily stopped accepting product vulnerability reports for its OSS VRP, citing a surge in automated, mostly invalid submissions.
Tech NewsAutomattic's board pushes Mullenweg out
Automattic's board placed CEO Matt Mullenweg on paid leave and named CFO Mark Davies interim CEO, according to a Slack message seen by TechCrunch.
Tech NewsX's Legal Push Against Nitter Tests Open Source Limits
X Corp. sends cease-and-desist letters to Nitter, an open source X reader, alleging API misuse and demanding shutdown.
SecurityAI Coding Piles Up Remediation Debt
Enterprises face growing open-source vulnerability backlogs as AI tools accelerate code output.
AI & MLAI Patch Flood: Why the Bug Bonanza Won't End Anytime Soon
AI is supercharging both bug discovery and bug creation, driving patch counts to record highs — and reshaping how software gets fixed.
SecurityRedis Patches Zero-Days Found by AI
Researchers used AI agents to uncover remote code execution vulnerabilities in Redis, prompting seven urgent security releases.
Tech NewsAI Firms Fight Against Export Controls
Tech giants and developers lobby Washington to protect open-weight model development from potential broad-reaching sanctions.
SecurityCapital One Releases VulnHunter Tool
The financial giant is open-sourcing its AI-powered security tool to help address software vulnerabilities at the code level.
Tech NewsCurrent AI’s Quest for Public Interest Tech
A nonprofit is mobilizing $400 million to build an open-source alternative to the private, proprietary AI systems of Silicon Valley.
Tech NewsKimi AI Sparking Global Tech Friction
The release of Moonshot AI's latest model has triggered intense debate over geopolitical rivalry and the future of open-weight systems.
Tech NewsThe Logic of Linux Distro Hopping: Identifying When to Switch
Exploring the distinct motivations driving Linux users to move between distributions and the criteria for finding the right fit.
SecurityThe Silent Sabotage: How MemGhost Alters AI Agent Memories
A new automated attack technique can plant persistent, invisible false memories into AI agents through a single, malicious email.
SecurityWhen Inside Access Becomes a Weapon Against Open Source
A dispute within the OpenMandriva Linux community leads to deleted repositories and a debate over administrative trust.
SecurityOrchestrating Trust: The Imperative of Speed in Open Source Security
As AI accelerates vulnerability discovery, a surge in 'clearinghouses' highlights a critical shift from mere data sharing to rapid, automated remediation.
Securitynpm 12 Reinforces Open-Source Supply Chains Against Covert Exploits
GitHub's npm 12 release hardens software supply chains by disabling install scripts by default and overhauling granular access tokens to mitigate critical risks.