Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
> Search
12 results for “open-source”
Cyber Crime
AI & MLAWS sandbox aims to tame rogue AI agents
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
SecurityRed Hat Batch-Fixes 400 Open-Source Flaws
Red Hat's Lightwell Clearinghouse exits pilot after remediating over 400 novel vulnerabilities in foundational Java libraries since June.
Cyber CrimePatch-Gap Zero-Days Fueled BlueMoon Kit
A new exploit kit chains four Chrome and Windows flaws, revealing how quickly attackers weaponize the delay between open-source fixes and stable browser patches.
Tech NewsX's Legal Push Against Nitter Tests Open Source Limits
X Corp. sends cease-and-desist letters to Nitter, an open source X reader, alleging API misuse and demanding shutdown.
SecurityAI Coding Piles Up Remediation Debt
Enterprises face growing open-source vulnerability backlogs as AI tools accelerate code output.
SecurityLinux Foundation's Akrites Set to Operationalize in September
The Linux Foundation's Akrites initiative plans to launch its vulnerability disclosure and remediation platform in September.
AI & MLOpen AI Weights Draw Defense From Three AI Pioneers
At Ai4, Hinton, Li, and Ng argue for openness in AI despite safety worries, disagreeing on tactics.
SecurityIndia Targets Decentralized App Code
A government demand to remove open-source repositories from GitHub challenges the legal limits of controlling offline messaging.
Tech NewsThe Regulatory Fight Over Open-Weight AI
Advocates argue that restricting open-source models like Kimi K3 prioritizes the profit margins of frontier labs over innovation.
Tech NewsCurrent AI’s Quest for Public Interest Tech
A nonprofit is mobilizing $400 million to build an open-source alternative to the private, proprietary AI systems of Silicon Valley.
Securitynpm 12 Reinforces Open-Source Supply Chains Against Covert Exploits
GitHub's npm 12 release hardens software supply chains by disabling install scripts by default and overhauling granular access tokens to mitigate critical risks.