open source

Meshery: Open-source cloud-native manager for Kubernetes

Don't miss, GitHub, News, open source, software /

Meshery: Open-source cloud-native manager for Kubernetes 2026-10-14 at 08:00 By Anamarija Pogorelec Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, […]

Meshery: Open-source cloud-native manager for Kubernetes Read More »

Strands Box: Open-source sandbox for AI agents

agentic AI, AWS, Don't miss, GitHub, Hot stuff, News, open source, software /

Strands Box: Open-source sandbox for AI agents 2026-10-12 at 08:30 By Mirko Zorz AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple […]

Strands Box: Open-source sandbox for AI agents Read More »

What makes some open source updates so difficult?

cybersecurity, Google, News, open source, report, software development /

What makes some open source updates so difficult? 2026-10-12 at 07:00 By Anamarija Pogorelec Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of an open […]

What makes some open source updates so difficult? Read More »

Anthropic offers free AI security scans to open-source maintainers

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, open source, scanner /

Anthropic offers free AI security scans to open-source maintainers 2026-10-09 at 12:55 By Anamarija Pogorelec Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when […]

Anthropic offers free AI security scans to open-source maintainers Read More »

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

AI, Anthropic, Application Security, Artificial Intelligence, ICS, ICS/OT, open source, OSS, OT, scanner /

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security 2026-10-09 at 11:19 By Eduard Kovacs OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in. The post Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security appeared first on SecurityWeek. This […]

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security Read More »

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws

enterprise, IBM, Java, News, open source, Red Hat, vulnerability assessment, vulnerability management /

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws 2026-10-08 at 07:18 By Anamarija Pogorelec IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for patching open source code that companies already run in production. Companies running the […]

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws Read More »

AI Agent Gateway: Open-source tool keeps credentials out of agent configs

agentic AI, Claude Code, Don't miss, GitHub, News, open source, software, Tuskira /

AI Agent Gateway: Open-source tool keeps credentials out of agent configs 2026-10-07 at 08:30 By Anamarija Pogorelec Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like GitHub and Jira, and the model providers they send prompts to. […]

AI Agent Gateway: Open-source tool keeps credentials out of agent configs Read More »

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing

Encryption, News, open source, OpenSSH, software /

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing 2026-10-07 at 08:12 By Sinisa Markovic The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of security reports, […]

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing Read More »

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

AI, Artificial Intelligence, bug bounty program, Google, open source, OSS, VRP, Vulnerabilities /

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports 2026-10-05 at 17:26 By Eduard Kovacs Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP). The post Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports appeared first on SecurityWeek. This […]

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports Read More »

Keyorix: Open-source secrets management for teams that can’t use SaaS

cybersecurity, data management, DevOps, DevSecOps, Don't miss, GitHub, Hot stuff, News, open source, software /

Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]

Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised

breach, Don't miss, Hot stuff, JFrog, News, open source, OpenInfra, vulnerability /

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised 2026-09-30 at 13:39 By Zeljka Zorz Attackers have compromised a self-hosted JFrog Artifactory instance operated by OpenInfra Europe, the regional hub of the OpenInfra Foundation warned in a security notice prominently displayed on its homepage. OpenInfra Europe’s security incident notice “Anyone who downloaded or installed artifacts […]

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised Read More »

OWASP Noir: Open-source static analysis tool

code analysis, cybersecurity, Don't miss, GitHub, News, open source, OWASP, software /

OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]

OWASP Noir: Open-source static analysis tool Read More »

Hottest cybersecurity open-source tools of the month: September 2026

AI, cybersecurity, GitHub, News, open source, password manager, penetration testing, Tencent /

Hottest cybersecurity open-source tools of the month: September 2026 2026-09-29 at 07:30 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Sift is […]

Hottest cybersecurity open-source tools of the month: September 2026 Read More »

Authorizer: Open-source authentication and authorization for your apps

authentication, cybersecurity, Don't miss, GitHub, News, open source /

Authorizer: Open-source authentication and authorization for your apps 2026-09-28 at 08:30 By Mirko Zorz Authorizer is an open-source server for sign-in and access control in web and mobile apps. Teams run it on their own infrastructure and keep user accounts in a database they choose. Its maintainers have built a permissions engine and an interface […]

Authorizer: Open-source authentication and authorization for your apps Read More »

GNOME 50.5 security fixes patch a gvfs CVE and Epiphany code injection

Linux, News, open source /

GNOME 50.5 security fixes patch a gvfs CVE and Epiphany code injection 2026-09-24 at 11:32 By Sinisa Markovic GNOME 50.5, which the GNOME Release Team shipped on September 24, patches a CVE in the gvfs file system layer, a JavaScript injection flaw in the Epiphany web browser and a use-after-free bug in the librsvg image […]

GNOME 50.5 security fixes patch a gvfs CVE and Epiphany code injection Read More »

Prismor: Open-source runtime control plane for AI agents

agentic AI, Don't miss, GitHub, News, open source, software /

Prismor: Open-source runtime control plane for AI agents 2026-09-23 at 08:30 By Anamarija Pogorelec Prismor is a free, open-source security layer for AI coding agents. It sits between an agent such as Claude Code, Codex, or Cursor and the actions that agent wants to take, and it checks each tool call against a policy before […]

Prismor: Open-source runtime control plane for AI agents Read More »

Researchers uncover malware that uses AI to choose its next move

AI, Cisco, Don't miss, Hot stuff, Malware, News, open source /

Researchers uncover malware that uses AI to choose its next move 2026-09-22 at 16:56 By Sinisa Markovic To help security practitioners catch malware that leans on AI, researchers from Cisco Talos shared an open-source framework that they hope will be used to classify and analyze the threat. The tool, called CAIRN, works entirely from metadata […]

Researchers uncover malware that uses AI to choose its next move Read More »

DeepZero: Open-source hunting for vulnerable Windows drivers

Don't miss, drivers, GitHub, News, open source, scanner, software, Windows /

DeepZero: Open-source hunting for vulnerable Windows drivers 2026-09-16 at 08:30 By Mirko Zorz DeepZero is an open-source engine that automates the search for exploitable Windows kernel drivers. You point it at a folder of binaries and it parses them, pulls them apart, scans them, throws most of them away, and asks a language model whether […]

DeepZero: Open-source hunting for vulnerable Windows drivers Read More »

Homebrew 7.0.0 is out, here’s what changed for security

News, open source, security update, software /

Homebrew 7.0.0 is out, here’s what changed for security 2026-09-15 at 03:47 By Sinisa Markovic Homebrew installs command-line software and desktop applications from the terminal on macOS and Linux, and Mac developers use it to set up their machines. On Sunday the project shipped version 7.0.0 and closed eight security advisories with it. The most […]

Homebrew 7.0.0 is out, here’s what changed for security Read More »

Debian 13.7 ships the fixes behind 92 security advisories, updates 106 packages

Debian, Linux, News, open source, security update /

Debian 13.7 ships the fixes behind 92 security advisories, updates 106 packages 2026-09-14 at 10:40 By Sinisa Markovic The Debian project shipped Debian 13.7 codenamed “trixie.” The project folded in 92 security advisories it had already published separately, added corrections to 106 source packages, and rebuilt the installer around both. Six of the 92 advisories […]

Debian 13.7 ships the fixes behind 92 security advisories, updates 106 packages Read More »

Scroll to Top