open source

Fireperf: Open-source network testing tool for firewalls and routers

cybersecurity, News, open source, software /

Fireperf: Open-source network testing tool for firewalls and routers 2026-11-03 at 07:30 By Mirko Zorz The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed at administrators, developers and testers who […]

Fireperf: Open-source network testing tool for firewalls and routers Read More »

DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work

DeepSeek, GitHub, News, open source, programming, software development /

DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work 2026-11-02 at 09:09 By Anamarija Pogorelec Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for […]

DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work Read More »

Byoky: Open-source wallet for AI API keys

AI, API security, authentication, digital wallet, Don't miss, GitHub, News, open source, software /

Byoky: Open-source wallet for AI API keys 2026-11-02 at 08:00 By Anamarija Pogorelec Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps […]

Byoky: Open-source wallet for AI API keys Read More »

Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps

Artificial Intelligence, Cisco, open source, Quarry /

Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps 2026-10-29 at 16:18 By Kevin Townsend Cisco open sourced Project Quarry, a rule language for detecting AI agent attacks that only emerge across sequences of benign actions. The post Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps […]

Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps Read More »

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA, cybersecurity, GitHub, Google Workspace, Government, Microsoft 365, News, open source, software, USA /

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to […]

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster Read More »

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records

cybersecurity, Don't miss, GitHub, News, open source, software /

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records 2026-10-28 at 08:00 By Anamarija Pogorelec AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, […]

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records Read More »

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3

cybersecurity, Kali Linux, Linux, News, OffSec, open source, operating system, penetration testing /

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 2026-10-26 at 19:34 By Anamarija Pogorelec The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so […]

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 Read More »

Witness: Open-source framework for verifying how your software was built

cybersecurity, DevSecOps, Don't miss, framework, GitHub, News, open source, software, supply chain /

Witness: Open-source framework for verifying how your software was built 2026-10-26 at 09:00 By Anamarija Pogorelec Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native […]

Witness: Open-source framework for verifying how your software was built Read More »

AI slop is piling up highest on the biggest open-source projects

AI, generative AI, LLMs, News, open source, programming, Red Hat, report, software development, The Linux Foundation /

AI slop is piling up highest on the biggest open-source projects 2026-10-26 at 08:30 By Mirko Zorz The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close […]

AI slop is piling up highest on the biggest open-source projects Read More »

Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes

AI, code, Google, News, open source /

Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes 2026-10-26 at 06:34 By Anamarija Pogorelec Google has open-sourced the Elephant-Goldfish Model plugin, an internal tool that makes an AI coding agent write and defend a design document before it touches any code. The plugin hands that document to fresh AI […]

Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes Read More »

r/opensource bans AI projects, and solo devs go down with them

AI, generative AI, LLMs, News, open source, Reddit, social networking /

r/opensource bans AI projects, and solo devs go down with them 2026-10-26 at 06:30 By Mirko Zorz Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator Wolvereness announced the rules in a post over the weekend. A […]

r/opensource bans AI projects, and solo devs go down with them Read More »

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

cybersecurity, Encryption, News, open source, OpenSSL, software /

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken 2026-10-26 at 01:33 By Anamarija Pogorelec The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version […]

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken Read More »

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

Aikido Security, CloudSEK, Don't miss, Hot stuff, Hudson Rock, Malware, News, open source, Socket, supply chain attacks, supply chain compromise, Wiz /

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials 2026-10-22 at 16:10 By Sinisa Markovic A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got […]

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials Read More »

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, PHP, PHP2Shell, scanner, Searchlight Cyber, software /

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 2026-10-22 at 15:03 By Mirko Zorz Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP […]

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 Read More »

Anthropic finds 94 cases where open-source projects drop security controls without warning

agentic AI, AI, Anthropic, cybersecurity, News, open source, report, security controls, software development /

Anthropic finds 94 cases where open-source projects drop security controls without warning 2026-10-22 at 12:10 By Anamarija Pogorelec Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and […]

Anthropic finds 94 cases where open-source projects drop security controls without warning Read More »

DevGuard: Open-source vulnerability management for the software supply chain

cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, News, open source, software, supply chain, vulnerability management /

DevGuard: Open-source vulnerability management for the software supply chain 2026-10-21 at 10:02 By Anamarija Pogorelec DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six […]

DevGuard: Open-source vulnerability management for the software supply chain Read More »

Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier

GitHub, News, open source, software, software development /

Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier 2026-10-21 at 06:42 By Anamarija Pogorelec Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units. Google also announced TPU support in the vLLM and SGLang serving engines, the TorchTitan training framework, […]

Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier Read More »

Meshery: Open-source cloud-native manager for Kubernetes

Don't miss, GitHub, News, open source, software /

Meshery: Open-source cloud-native manager for Kubernetes 2026-10-14 at 08:00 By Anamarija Pogorelec Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, […]

Meshery: Open-source cloud-native manager for Kubernetes Read More »

Strands Box: Open-source sandbox for AI agents

agentic AI, AWS, Don't miss, GitHub, Hot stuff, News, open source, software /

Strands Box: Open-source sandbox for AI agents 2026-10-12 at 08:30 By Mirko Zorz AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple […]

Strands Box: Open-source sandbox for AI agents Read More »

What makes some open source updates so difficult?

cybersecurity, Google, News, open source, report, software development /

What makes some open source updates so difficult? 2026-10-12 at 07:00 By Anamarija Pogorelec Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of an open […]

What makes some open source updates so difficult? Read More »

Scroll to Top