software

Fireperf: Open-source network testing tool for firewalls and routers

cybersecurity, News, open source, software /

Fireperf: Open-source network testing tool for firewalls and routers 2026-11-03 at 07:30 By Mirko Zorz The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed at administrators, developers and testers who […]

Fireperf: Open-source network testing tool for firewalls and routers Read More »

Byoky: Open-source wallet for AI API keys

AI, API security, authentication, digital wallet, Don't miss, GitHub, News, open source, software /

Byoky: Open-source wallet for AI API keys 2026-11-02 at 08:00 By Anamarija Pogorelec Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps […]

Byoky: Open-source wallet for AI API keys Read More »

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA, cybersecurity, GitHub, Google Workspace, Government, Microsoft 365, News, open source, software, USA /

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to […]

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster Read More »

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records

cybersecurity, Don't miss, GitHub, News, open source, software /

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records 2026-10-28 at 08:00 By Anamarija Pogorelec AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, […]

AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records Read More »

Witness: Open-source framework for verifying how your software was built

cybersecurity, DevSecOps, Don't miss, framework, GitHub, News, open source, software, supply chain /

Witness: Open-source framework for verifying how your software was built 2026-10-26 at 09:00 By Anamarija Pogorelec Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native […]

Witness: Open-source framework for verifying how your software was built Read More »

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

cybersecurity, Encryption, News, open source, OpenSSL, software /

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken 2026-10-26 at 01:33 By Anamarija Pogorelec The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version […]

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken Read More »

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, PHP, PHP2Shell, scanner, Searchlight Cyber, software /

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 2026-10-22 at 15:03 By Mirko Zorz Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP […]

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 Read More »

DevGuard: Open-source vulnerability management for the software supply chain

cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, News, open source, software, supply chain, vulnerability management /

DevGuard: Open-source vulnerability management for the software supply chain 2026-10-21 at 10:02 By Anamarija Pogorelec DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six […]

DevGuard: Open-source vulnerability management for the software supply chain Read More »

Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier

GitHub, News, open source, software, software development /

Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier 2026-10-21 at 06:42 By Anamarija Pogorelec Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units. Google also announced TPU support in the vLLM and SGLang serving engines, the TorchTitan training framework, […]

Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier Read More »

Bearer CLI: Free, source-available code security scanning tool (SAST)

Application Security, Bearer, DevSecOps, Don't miss, GitHub, News, penetration testing, scanner, software /

Bearer CLI: Free, source-available code security scanning tool (SAST) 2026-10-19 at 08:30 By Anamarija Pogorelec Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code without running it. Organizations can use it freely, […]

Bearer CLI: Free, source-available code security scanning tool (SAST) Read More »

Meshery: Open-source cloud-native manager for Kubernetes

Don't miss, GitHub, News, open source, software /

Meshery: Open-source cloud-native manager for Kubernetes 2026-10-14 at 08:00 By Anamarija Pogorelec Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, […]

Meshery: Open-source cloud-native manager for Kubernetes Read More »

Strands Box: Open-source sandbox for AI agents

agentic AI, AWS, Don't miss, GitHub, Hot stuff, News, open source, software /

Strands Box: Open-source sandbox for AI agents 2026-10-12 at 08:30 By Mirko Zorz AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple […]

Strands Box: Open-source sandbox for AI agents Read More »

AI Agent Gateway: Open-source tool keeps credentials out of agent configs

agentic AI, Claude Code, Don't miss, GitHub, News, open source, software, Tuskira /

AI Agent Gateway: Open-source tool keeps credentials out of agent configs 2026-10-07 at 08:30 By Anamarija Pogorelec Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like GitHub and Jira, and the model providers they send prompts to. […]

AI Agent Gateway: Open-source tool keeps credentials out of agent configs Read More »

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing

Encryption, News, open source, OpenSSH, software /

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing 2026-10-07 at 08:12 By Sinisa Markovic The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of security reports, […]

OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing Read More »

Keyorix: Open-source secrets management for teams that can’t use SaaS

cybersecurity, data management, DevOps, DevSecOps, Don't miss, GitHub, Hot stuff, News, open source, software /

Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]

Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »

OWASP Noir: Open-source static analysis tool

code analysis, cybersecurity, Don't miss, GitHub, News, open source, OWASP, software /

OWASP Noir: Open-source static analysis tool 2026-09-30 at 08:30 By Anamarija Pogorelec OWASP Noir is an open-source static analysis tool that reads an application’s source code and lists the endpoints it exposes: paths, HTTP methods, parameters, headers, and cookies, each tied to the file and line it came from. Here’s where it gets useful. Shadow […]

OWASP Noir: Open-source static analysis tool Read More »

Prismor: Open-source runtime control plane for AI agents

agentic AI, Don't miss, GitHub, News, open source, software /

Prismor: Open-source runtime control plane for AI agents 2026-09-23 at 08:30 By Anamarija Pogorelec Prismor is a free, open-source security layer for AI coding agents. It sits between an agent such as Claude Code, Codex, or Cursor and the actions that agent wants to take, and it checks each tool call against a policy before […]

Prismor: Open-source runtime control plane for AI agents Read More »

DeepZero: Open-source hunting for vulnerable Windows drivers

Don't miss, drivers, GitHub, News, open source, scanner, software, Windows /

DeepZero: Open-source hunting for vulnerable Windows drivers 2026-09-16 at 08:30 By Mirko Zorz DeepZero is an open-source engine that automates the search for exploitable Windows kernel drivers. You point it at a folder of binaries and it parses them, pulls them apart, scans them, throws most of them away, and asks a language model whether […]

DeepZero: Open-source hunting for vulnerable Windows drivers Read More »

Homebrew 7.0.0 is out, here’s what changed for security

News, open source, security update, software /

Homebrew 7.0.0 is out, here’s what changed for security 2026-09-15 at 03:47 By Sinisa Markovic Homebrew installs command-line software and desktop applications from the terminal on macOS and Linux, and Mac developers use it to set up their machines. On Sunday the project shipped version 7.0.0 and closed eight security advisories with it. The most […]

Homebrew 7.0.0 is out, here’s what changed for security Read More »

Permify: Open-source authorization as a service

DevSecOps, Don't miss, GitHub, News, open source, software /

Permify: Open-source authorization as a service 2026-09-14 at 08:30 By Sinisa Markovic Permify is an open-source authorization service that answers access questions at run time: can user X view document Y, which posts can members of team Y edit. It keeps those rules in one place, apart from the application code that would otherwise carry […]

Permify: Open-source authorization as a service Read More »

Scroll to Top