open source

Future AGI: Open-source platform for shipping self-improving AI agents

agentic AI, AI, Don't miss, GitHub, Hot stuff, LLMs, News, open source /

Future AGI: Open-source platform for shipping self-improving AI agents 2026-08-05 at 08:30 By Anamarija Pogorelec Future AGI is an open-source platform for tracing, evaluating, simulating, and guardrailing LLM agents, licensed Apache 2.0 and self-hostable. Self-hosted instances register with Future AGI on first boot and send an instance ID, a version string, a deployment type, and […]

Future AGI: Open-source platform for shipping self-improving AI agents Read More »

Your enterprise AI footprint is about three times bigger than your model list

agentic AI, AI, cybersecurity, News, open source, report, Snyk /

Your enterprise AI footprint is about three times bigger than your model list 2026-08-05 at 07:00 By Anamarija Pogorelec Organizations are building AI systems that combine models, agents and external tools instead of relying on standalone AI, according to Snyk’s latest State of Agentic AI Adoption report. The study analyzed 3,044 enterprise environments and 1.39

Your enterprise AI footprint is about three times bigger than your model list Read More »

OWASP’s subtractive security project measures the attack paths you erased

CISO, cybersecurity, Don't miss, Features, GitHub, Hot stuff, News, open source, OWASP /

OWASP’s subtractive security project measures the attack paths you erased 2026-08-04 at 08:30 By Mirko Zorz An attacker who talks a user into opening an attachment gets whatever that machine still permits: a service account with rights across the domain, an outbound route to anywhere, a scripting engine sitting there for the taking. Christopher Frenz

OWASP’s subtractive security project measures the attack paths you erased Read More »

CISA lays out new guidance for using open-source software

AI, CISA, News, open source, software development /

CISA lays out new guidance for using open-source software 2026-08-03 at 14:53 By Anamarija Pogorelec The US Cybersecurity and Infrastructure Security Agency (CISA) has published the Open Source Software: Security Principles and Practices guide, which provides federal agencies with recommendations for managing the security of open source software, contributing to OSS projects, and evaluating open

CISA lays out new guidance for using open-source software Read More »

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills

agentic AI, Don't miss, GitHub, Hot stuff, LLMs, News, NVIDIA, open source, scanner, software /

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills 2026-08-03 at 08:30 By Anamarija Pogorelec SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a list of

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills Read More »

CISA sets a new SBOM baseline

AI, CISA, cybersecurity, News, open source, SaaS, software /

CISA sets a new SBOM baseline 2026-07-30 at 15:23 By Anamarija Pogorelec The US Cybersecurity and Infrastructure Security Agency (CISA), together with its co-authoring partners, has released the 2026 Minimum Elements for a Software Bill of Materials (SBOM), replacing the 2021 guidance published by the National Telecommunications and Information Administration (NTIA). An SBOM is a

CISA sets a new SBOM baseline Read More »

Specter: Open-source NFC reader bug sweep for Flipper Zero

cybersecurity, News, open source, software /

Specter: Open-source NFC reader bug sweep for Flipper Zero 2026-07-29 at 08:00 By Anamarija Pogorelec Specter is a Flipper Zero app that finds powered NFC readers by listening for the radio field they give off. The readers it hunts work at 13.56 MHz. The Flipper’s own chip does the sensing The onboard ST25R3916 carries a

Specter: Open-source NFC reader bug sweep for Flipper Zero Read More »

Hugging Face breach reignites open-weights debate, raises liability questions

agentic AI, Anthropic, CISO, Cloud Security Alliance, Don't miss, Hot stuff, Hugging Face, LLMs, News, open source, OpenAI, policy /

Hugging Face breach reignites open-weights debate, raises liability questions 2026-07-28 at 18:55 By Zeljka Zorz The first publicly documented cyberattack run end-to-end by an autonomous AI was an OpenAI benchmark test that escaped its sandbox and breached Hugging Face. In an incident post-mortem compiled with the input from Hugging Face and several hundred members of

Hugging Face breach reignites open-weights debate, raises liability questions Read More »

Tech giants form alliance to put open AI in cyber defenders’ hands

agentic AI, AI, cybersecurity, Hugging Face, News, NVIDIA, open source, OpenSSF, The Linux Foundation /

Tech giants form alliance to put open AI in cyber defenders’ hands 2026-07-27 at 17:43 By Sinisa Markovic NVIDIA and a group of tech companies have formed an alliance to promote the use of open AI models in cybersecurity, days after OpenAI disclosed that one of its own AI models breached Hugging Face’s systems during

Tech giants form alliance to put open AI in cyber defenders’ hands Read More »

Multi-patch vulnerability fixes can leave open source exposed

CVE, Don't miss, Features, Hot stuff, News, open source, patching, research, strategy, tips, vulnerability management /

Multi-patch vulnerability fixes can leave open source exposed 2026-07-23 at 08:00 By Mirko Zorz Vulnerability management runs on a shorthand. A CVE shows a linked patch, someone applies it, and the ticket moves to closed. That shorthand covers most open source fixes. A share work in a different way, arriving as a run of two

Multi-patch vulnerability fixes can leave open source exposed Read More »

Snowpick: Open-source ServiceNow exposure scanner

AppOmni, Bishop Fox, cybersecurity, Don't miss, GitHub, News, open source, ServiceNow, software, Varonis /

Snowpick: Open-source ServiceNow exposure scanner 2026-07-22 at 08:30 By Mirko Zorz An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test across 166 ServiceNow instances

Snowpick: Open-source ServiceNow exposure scanner Read More »

Open-source maintainers still work underfunded as sponsorship crosses $100 million

DevOps, GitHub, News, open source /

Open-source maintainers still work underfunded as sponsorship crosses $100 million 2026-07-21 at 11:37 By Anamarija Pogorelec A maintainer patches a library late at night that ships inside thousands of products, and no invoice follows. Sebastián Ramírez and Caleb Porzio spent years in that position. Ramírez, known as tiangolo, builds tools that other Python projects depend

Open-source maintainers still work underfunded as sponsorship crosses $100 million Read More »

AI-generated reports push GNOME to shorten its disclosure window

Linux, News, open source, vulnerability disclosure /

AI-generated reports push GNOME to shorten its disclosure window 2026-07-21 at 06:53 By Anamarija Pogorelec Volunteer maintainers of open source projects now receive a steady flow of security vulnerability reports produced with AI tools. Many arrive with no mention that a language model helped write them. The volume has grown enough that GNOME is revising

AI-generated reports push GNOME to shorten its disclosure window Read More »

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform

Don't miss, GitHub, Microsoft, network, News, open source, software, traffic monitoring /

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform 2026-07-20 at 09:00 By Anamarija Pogorelec Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own. A new open-source project from Microsoft supplies that infrastructure in a package

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform Read More »

Nearly half of open-source AI projects never reach production

AI, Compliance, Mozilla, News, open source, report, software development /

Nearly half of open-source AI projects never reach production 2026-07-20 at 07:00 By Anamarija Pogorelec Open models are moving into production across more organizations, and the work of securing those deployments increasingly extends beyond the model weights. Mozilla’s The State of Open Source AI 2026 identifies deployment, governance and operational tooling as persistent obstacles as

Nearly half of open-source AI projects never reach production Read More »

What public money does to open-source projects

code, cybersecurity, DevOps, Don't miss, News, open source, research /

What public money does to open-source projects 2026-07-16 at 08:30 By Mirko Zorz Most of the software running inside a typical company was written by volunteers the company never paid. Open-source code sits under web apps, build pipelines, and the machine learning stacks getting so much attention right now. Roughly 96 percent of codebases carry

What public money does to open-source projects Read More »

FreeRDP 3.29.0 security update resolves 22 advisories

News, open source, remote access, software /

FreeRDP 3.29.0 security update resolves 22 advisories 2026-07-15 at 11:42 By Anamarija Pogorelec FreeRDP is a free implementation of the Remote Desktop Protocol, released under the Apache license, and it runs on a large share of workstations and servers through the many tools built on it. The 3.29.0 version is a security, bugfix, and maintenance

FreeRDP 3.29.0 security update resolves 22 advisories Read More »

SingGuard-NSFA: Open-source guardrails for agentic AI

agentic AI, cybersecurity, Don't miss, GitHub, News, open source, software /

SingGuard-NSFA: Open-source guardrails for agentic AI 2026-07-15 at 08:30 By Anamarija Pogorelec SingGuard-NSFA is an open-source guardrail framework aimed at operational threats in agent workflows. Four models ship at 0.8B, 2B, 4B, and 9B parameters, all built on Qwen3.5 base backbones. Risk taxonomy The NSFA risk taxonomy organizes threats along the CIA triad of confidentiality,

SingGuard-NSFA: Open-source guardrails for agentic AI Read More »

Chatto: Open-source team messenger with privacy at its core

Encryption, messaging, News, open source, Privacy, software /

Chatto: Open-source team messenger with privacy at its core 2026-07-14 at 07:30 By Anamarija Pogorelec Teams that want their group chats off commercial platforms have a growing menu of self-hosted options. Chatto joined that group when its developer released the code under an open-source license and posted binaries for anyone to run on their own

Chatto: Open-source team messenger with privacy at its core Read More »

Cynative: Open-source deep research agent

agentic AI, AWS, cybersecurity, Don't miss, GitHub, Hot stuff, LLMs, News, open source, software /

Cynative: Open-source deep research agent 2026-07-13 at 09:00 By Mirko Zorz Running a large language model against a live cloud account to hunt for security holes comes with an obvious hazard. An agent that holds real credentials and a mandate to poke around can delete a bucket, flip a permission, or leak a secret on

Cynative: Open-source deep research agent Read More »

Scroll to Top