open source

OpenSSL 4.0.0 release cuts deprecated protocols and gains post-quantum support

Encryption, News, open source, OpenSSL, software /

OpenSSL 4.0.0 release cuts deprecated protocols and gains post-quantum support 2026-04-14 at 18:57 By Anamarija Pogorelec OpenSSL 4.0.0 removes several long-deprecated features, adds support for Encrypted Client Hello, and introduces API-level changes that will require code updates for applications built against older versions. SSLv3, SSLv2 client hello, and engines are gone SSLv3 support has been […]

OpenSSL 4.0.0 release cuts deprecated protocols and gains post-quantum support Read More »

DavMail 6.6.0 patches a regex flaw and advances its Microsoft Graph backend

News, open source, software /

DavMail 6.6.0 patches a regex flaw and advances its Microsoft Graph backend 2026-04-14 at 16:21 By Anamarija Pogorelec Organizations that run DavMail to bridge standard mail clients to Microsoft Exchange or Office 365 received an update this week. Version 6.6.0 addresses a code-scanning alert tied to a regex vulnerability, adjusts OAuth redirect handling to match

DavMail 6.6.0 patches a regex flaw and advances its Microsoft Graph backend Read More »

ZeroID: Open-source identity platform for autonomous AI agents

agentic AI, Artificial Intelligence, Don't miss, GitHub, Highflame, Hot stuff, News, open source, software /

ZeroID: Open-source identity platform for autonomous AI agents 2026-04-13 at 09:02 By Mirko Zorz ZeroID is an open-source identity platform that implements an identity and credentialing layer specifically for autonomous agents and multi-agent systems. The attribution problem The core issue ZeroID targets is attribution in agentic workflows. When an orchestrator agent spawns sub-agents to carry

ZeroID: Open-source identity platform for autonomous AI agents Read More »

The fully free Linux OS Trisquel gets a major update with version 12.0 Ecne

Linux, News, open source, operating system /

The fully free Linux OS Trisquel gets a major update with version 12.0 Ecne 2026-04-13 at 02:01 By Anamarija Pogorelec Trisquel GNU/Linux, a free operating system aimed at home users, small enterprises, and educational centers, released version 12.0. The release, codenamed Ecne, is declared production-ready and builds on the previous version, Aramo, with changes to

The fully free Linux OS Trisquel gets a major update with version 12.0 Ecne Read More »

Little Snitch for Linux shows what your apps are connecting to

cybersecurity, Linux, network, network monitoring, News, open source, software /

Little Snitch for Linux shows what your apps are connecting to 2026-04-10 at 11:48 By Mirko Zorz Network monitoring on Linux has long been a gap for users who want per-process visibility into outbound connections. Existing tools either operate at the command line or were designed for server security rather than desktop privacy. Objective Development,

Little Snitch for Linux shows what your apps are connecting to Read More »

Asqav: Open-source SDK for AI agent governance

agentic AI, cybersecurity, Don't miss, GitHub, News, open source, software /

Asqav: Open-source SDK for AI agent governance 2026-04-09 at 08:27 By Mirko Zorz AI agents are executing consequential tasks autonomously, often across multiple systems and with little record of what they did or why. Asqav, a Python SDK released under the MIT license, addresses that gap by attaching a cryptographic signature to each agent action

Asqav: Open-source SDK for AI agent governance Read More »

Social engineering attacks on open source developers are escalating

Don't miss, Hot stuff, LinkedIn, News, open source, OpenSSF, Slack, social engineering, Socket, software development /

Social engineering attacks on open source developers are escalating 2026-04-08 at 15:45 By Zeljka Zorz North Korean hackers spent weeks socially engineering an Axios maintainer through a fake Slack workspace, a cloned company identity, and a fabricated Microsoft Teams call that tricked him into installing a RAT posings as a software update. They used the

Social engineering attacks on open source developers are escalating Read More »

Comp AI: The open-source way to get compliant with SOC 2, ISO 27001, HIPAA and GDPR

Compliance, cybersecurity, Data Protection, Don't miss, Drata, GDPR, HIPAA, ISO 27001, News, open source, regulation, Vanta /

Comp AI: The open-source way to get compliant with SOC 2, ISO 27001, HIPAA and GDPR 2026-04-07 at 12:01 By Anamarija Pogorelec Getting a startup through a SOC 2 audit has long meant months of manual evidence collection, policy writing, and repeated back-and-forth with auditors. A growing number of compliance platforms have moved to automate

Comp AI: The open-source way to get compliant with SOC 2, ISO 27001, HIPAA and GDPR Read More »

Product showcase: Proton Authenticator is an end-to-end encrypted, open source 2FA app

2FA, authentication, identity protection, iOS, News, open source, Product showcase, Proton, software /

Product showcase: Proton Authenticator is an end-to-end encrypted, open source 2FA app 2026-04-06 at 09:16 By Anamarija Pogorelec Proton Authenticator is a free and open-source two-factor authentication (2FA) app that generates time-based one-time passwords (TOTP) to help secure online accounts. It is available on Windows, macOS, Linux, iOS, and Android, allowing users to access their

Product showcase: Proton Authenticator is an end-to-end encrypted, open source 2FA app Read More »

Microsoft releases open-source toolkit to govern autonomous AI agents

agentic AI, cybersecurity, Don't miss, GitHub, Microsoft, News, open source, software /

Microsoft releases open-source toolkit to govern autonomous AI agents 2026-04-03 at 08:39 By Anamarija Pogorelec AI agents can book travel, execute financial transactions, write and run code, and manage infrastructure without human intervention at each step. Frameworks like LangChain, AutoGen, CrewAI, and Azure AI Foundry Agent Service have made this kind of autonomy straightforward to

Microsoft releases open-source toolkit to govern autonomous AI agents Read More »

OpenSSH 10.3 patches five security bugs and drops legacy rekeying support

Encryption, News, open source, OpenSSH, software, SSH /

OpenSSH 10.3 patches five security bugs and drops legacy rekeying support 2026-04-02 at 18:58 By Anamarija Pogorelec OpenSSH 10.3 shipped carrying five security fixes alongside feature additions and a set of behavior changes that will break compatibility with older SSH implementations that do not support rekeying. Rekeying compatibility removed SSH clients and servers that lack

OpenSSH 10.3 patches five security bugs and drops legacy rekeying support Read More »

Intel puts its data center performance knowledge on GitHub

chip, data center, DevOps, GitHub, hardware, Intel, News, open source /

Intel puts its data center performance knowledge on GitHub 2026-03-31 at 15:43 By Anamarija Pogorelec Intel engineers have published a centralized repository of data center performance knowledge on GitHub, giving practitioners direct access to tuning guides, configuration recommendations, and optimization recipes that previously required hunting across forums and scattered documentation. The repository, called Optimization Zone,

Intel puts its data center performance knowledge on GitHub Read More »

Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration step

GitHub, News, open source, software, spam /

Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration step 2026-03-31 at 15:43 By Sinisa Markovic The open-source spam filtering platform Rspamd released version 4.0.0, delivering infrastructure changes across its scan protocol, memory model, hash storage, and configuration system. Several of the changes are breaking, and at least one requires a

Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration step Read More »

Hottest cybersecurity open-source tools of the month: March 2026

cybersecurity, GitHub, News, open source, software /

Hottest cybersecurity open-source tools of the month: March 2026 2026-03-31 at 07:37 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. BlacksmithAI: Open-source AI-powered penetration testing framework BlacksmithAI is an open-source penetration testing framework that uses

Hottest cybersecurity open-source tools of the month: March 2026 Read More »

Telnyx Targeted in Growing TeamPCP Supply Chain Attack

Malware & Threats, open source, PyPI, supply chain attack, Supply Chain Security, TeamPCP, Telnyx /

Telnyx Targeted in Growing TeamPCP Supply Chain Attack 2026-03-30 at 14:26 By Ionut Arghire Two malicious versions of the popular SDK were uploaded to the PyPI registry, targeting Windows, macOS, and Linux. The post Telnyx Targeted in Growing TeamPCP Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Telnyx Targeted in Growing TeamPCP Supply Chain Attack Read More »

SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools

Linux, News, open source, software /

SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools 2026-03-30 at 10:37 By Anamarija Pogorelec Bootable Linux recovery environments occupy a specific niche in the systems administration and incident response toolkit. SystemRescue, an Arch-based live distribution built for repairing unbootable systems and recovering data from damaged drives, has shipped version 13.00

SystemRescue 13 updates its kernel to Linux 6.18 LTS, adds new recovery tools Read More »

ShipSec Studio brings open-source workflow orchestration to security operations

Don't miss, GitHub, Hot stuff, News, open source, security operations, software /

ShipSec Studio brings open-source workflow orchestration to security operations 2026-03-30 at 08:04 By Anamarija Pogorelec Security teams have long relied on a mix of shell scripts, cron jobs, and loosely connected tools to chain reconnaissance and vulnerability scanning work together. ShipSec Studio, an open-source security workflow automation platform from ShipSec AI, aims to replace that

ShipSec Studio brings open-source workflow orchestration to security operations Read More »

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

Aikido Security, Don't miss, Endor Labs, Hot stuff, Linux, macOS, Malware, News, open source, PyPI, SafeDep, supply chain attacks, supply chain compromise, Windows /

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware 2026-03-27 at 15:46 By Zeljka Zorz TeamPCP continues is supply chain compromise rampage, with telnyx on PyPI being the latest maliciously modified package. What happened? Telnyx is a widely used software development kit (SDK) for the Telnyx AI Voice Agent service. According to Endor Labs researchers,

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware Read More »

Tails 7.6 ships automatic Tor bridge retrieval and a new password manager

Encryption, News, open source, Privacy, software, Tails /

Tails 7.6 ships automatic Tor bridge retrieval and a new password manager 2026-03-27 at 01:05 By Anamarija Pogorelec Tails 7.6 is out, and for users operating on networks that block Tor, the most consequential addition is built-in bridge retrieval. The Tor Connection assistant can now detect when a direct connection to Tor is restricted and

Tails 7.6 ships automatic Tor bridge retrieval and a new password manager Read More »

LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks

Aikido Security, Aqua Security, Checkmarx, Don't miss, Hot stuff, Malware, News, open source, PyPI, Sonatype, supply chain attacks, supply chain compromise, Wiz /

LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks 2026-03-25 at 14:01 By Zeljka Zorz A slew of supply chain attacks against popular open source tools and packages appears to have been orchestrated by TeamPCP, a cybercriminal group that rose to prominence in late 2025. The latest victim of the group is BerryAI’s popular

LiteLLM PyPI packages compromised in expanding TeamPCP supply chain attacks Read More »

Scroll to Top