software

Qodana 2026.2 adds post-quantum crypto checks for JVM code

Application Security, code, JetBrains, News, software, update /

Qodana 2026.2 adds post-quantum crypto checks for JVM code 2026-08-03 at 14:21 By Anamarija Pogorelec Qodana 2026.2 shipped with new security inspections, published benchmark results, post-quantum cryptography checks, and coverage reporting that no longer has to be pointed at the reports. The security work sits in the .NET linter and runs by default. Qodana tracks […]

Qodana 2026.2 adds post-quantum crypto checks for JVM code Read More »

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills

agentic AI, Don't miss, GitHub, Hot stuff, LLMs, News, NVIDIA, open source, scanner, software /

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills 2026-08-03 at 08:30 By Anamarija Pogorelec SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a list of

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills Read More »

CISA sets a new SBOM baseline

AI, CISA, cybersecurity, News, open source, SaaS, software /

CISA sets a new SBOM baseline 2026-07-30 at 15:23 By Anamarija Pogorelec The US Cybersecurity and Infrastructure Security Agency (CISA), together with its co-authoring partners, has released the 2026 Minimum Elements for a Software Bill of Materials (SBOM), replacing the 2021 guidance published by the National Telecommunications and Information Administration (NTIA). An SBOM is a

CISA sets a new SBOM baseline Read More »

Specter: Open-source NFC reader bug sweep for Flipper Zero

cybersecurity, News, open source, software /

Specter: Open-source NFC reader bug sweep for Flipper Zero 2026-07-29 at 08:00 By Anamarija Pogorelec Specter is a Flipper Zero app that finds powered NFC readers by listening for the radio field they give off. The readers it hunts work at 13.56 MHz. The Flipper’s own chip does the sensing The onboard ST25R3916 carries a

Specter: Open-source NFC reader bug sweep for Flipper Zero Read More »

PyPI hardens package security with new upload restrictions

cybersecurity, News, PyPI, Python, software /

PyPI hardens package security with new upload restrictions 2026-07-23 at 12:31 By Anamarija Pogorelec The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromised. “This change will protect Python users and

PyPI hardens package security with new upload restrictions Read More »

Snowpick: Open-source ServiceNow exposure scanner

AppOmni, Bishop Fox, cybersecurity, Don't miss, GitHub, News, open source, ServiceNow, software, Varonis /

Snowpick: Open-source ServiceNow exposure scanner 2026-07-22 at 08:30 By Mirko Zorz An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test across 166 ServiceNow instances

Snowpick: Open-source ServiceNow exposure scanner Read More »

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform

Don't miss, GitHub, Microsoft, network, News, open source, software, traffic monitoring /

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform 2026-07-20 at 09:00 By Anamarija Pogorelec Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own. A new open-source project from Microsoft supplies that infrastructure in a package

Meet Dusseldorf, Microsoft’s open-source out-of-band security platform Read More »

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process

GitHub, Microsoft, News, programming, software /

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process 2026-07-16 at 10:45 By Anamarija Pogorelec Developers who lean on AI coding agents often keep several editor windows open at once, each tied to its own session. The 1.129 release of Visual Studio Code reworks that setup with a dedicated agent host.

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process Read More »

FreeRDP 3.29.0 security update resolves 22 advisories

News, open source, remote access, software /

FreeRDP 3.29.0 security update resolves 22 advisories 2026-07-15 at 11:42 By Anamarija Pogorelec FreeRDP is a free implementation of the Remote Desktop Protocol, released under the Apache license, and it runs on a large share of workstations and servers through the many tools built on it. The 3.29.0 version is a security, bugfix, and maintenance

FreeRDP 3.29.0 security update resolves 22 advisories Read More »

SingGuard-NSFA: Open-source guardrails for agentic AI

agentic AI, cybersecurity, Don't miss, GitHub, News, open source, software /

SingGuard-NSFA: Open-source guardrails for agentic AI 2026-07-15 at 08:30 By Anamarija Pogorelec SingGuard-NSFA is an open-source guardrail framework aimed at operational threats in agent workflows. Four models ship at 0.8B, 2B, 4B, and 9B parameters, all built on Qwen3.5 base backbones. Risk taxonomy The NSFA risk taxonomy organizes threats along the CIA triad of confidentiality,

SingGuard-NSFA: Open-source guardrails for agentic AI Read More »

Chatto: Open-source team messenger with privacy at its core

Encryption, messaging, News, open source, Privacy, software /

Chatto: Open-source team messenger with privacy at its core 2026-07-14 at 07:30 By Anamarija Pogorelec Teams that want their group chats off commercial platforms have a growing menu of self-hosted options. Chatto joined that group when its developer released the code under an open-source license and posted binaries for anyone to run on their own

Chatto: Open-source team messenger with privacy at its core Read More »

Cynative: Open-source deep research agent

agentic AI, AWS, cybersecurity, Don't miss, GitHub, Hot stuff, LLMs, News, open source, software /

Cynative: Open-source deep research agent 2026-07-13 at 09:00 By Mirko Zorz Running a large language model against a live cloud account to hunt for security holes comes with an obvious hazard. An agent that holds real credentials and a mandate to poke around can delete a bucket, flip a permission, or leak a secret on

Cynative: Open-source deep research agent Read More »

The open source library holding up your stack might have one maintainer

code, Don't miss, News, open source, research, software /

The open source library holding up your stack might have one maintainer 2026-07-10 at 10:00 By Sinisa Markovic Every serious software product runs on code that someone else wrote and released for free. A web service leans on a cryptography library, a data pipeline pulls in a parser, and a mobile app ships a handful

The open source library holding up your stack might have one maintainer Read More »

20 open-source cybersecurity tools to keep your team ready for anything

agentic AI, AI, Application Security, containers, cybersecurity, Don't miss, Endpoint Security, Exabeam, firewall, GitHub, Hot stuff, LLMs, Microsoft, News, open source, OWASP, penetration testing, scanner, security telemetry, software, vulnerability assessment, Windows /

20 open-source cybersecurity tools to keep your team ready for anything 2026-07-08 at 08:30 By Anamarija Pogorelec AI is changing how security teams find vulnerabilities, analyze code, test applications, and protect infrastructure. Developers are building tools to secure AI systems themselves, from coding agents and memory protection to model exposure discovery. This roundup covers recent

20 open-source cybersecurity tools to keep your team ready for anything Read More »

OpenSSH 10.4 arrives with security fixes and a post-quantum signature option

Encryption, News, open source, OpenSSH, software /

OpenSSH 10.4 arrives with security fixes and a post-quantum signature option 2026-07-06 at 16:05 By Anamarija Pogorelec Operators who manage remote access to Unix and Linux systems keep a close watch on OpenSSH, the software that carries most SSH traffic across the internet. The project released version 10.4 with eight security fixes, a set of

OpenSSH 10.4 arrives with security fixes and a post-quantum signature option Read More »

Omnigent: Open-source AI agent framework and meta-harness

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, software /

Omnigent: Open-source AI agent framework and meta-harness 2026-07-06 at 08:30 By Sinisa Markovic Plenty of developers now keep several coding agents close at hand, reaching for Claude Code on one task and Codex or Cursor on the next. Each tool arrives with its own command line, its own handling of credentials, and its own way

Omnigent: Open-source AI agent framework and meta-harness Read More »

New ClamAV security patch closes seven scanner bugs dating back two decades

antivirus, Cisco, News, open source, scanner, security update, software /

New ClamAV security patch closes seven scanner bugs dating back two decades 2026-07-06 at 01:30 By Sinisa Markovic Open source antivirus scanning sits inside mail gateways, file upload checks, and endpoint tooling at organizations of every size. Much of that work runs through ClamAV, the scanning engine maintained by Cisco’s Talos group. The project released

New ClamAV security patch closes seven scanner bugs dating back two decades Read More »

Nika: Open-source code analysis tool

Application Security, code analysis, code review, Don't miss, GitHub, microservices, News, open source, scanner, software /

Nika: Open-source code analysis tool 2026-07-01 at 09:00 By Mirko Zorz Many serious security bugs in web applications sit across several files at once. Request data enters through a controller, moves through data objects and service layers, and turns dangerous only when it reaches a sensitive operation such as a database query or a file

Nika: Open-source code analysis tool Read More »

Hottest cybersecurity open-source tools of the month: June 2026

cybersecurity, GitHub, News, open source, OWASP, software /

Hottest cybersecurity open-source tools of the month: June 2026 2026-06-30 at 08:00 By Anamarija Pogorelec Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. OWASP Agent Memory Guard: Stop AI agents from being weaponized through their own memory AI

Hottest cybersecurity open-source tools of the month: June 2026 Read More »

DarkMoon: Open-source AI pentesting platform

agentic AI, AI, automation, cybersecurity, Don't miss, GitHub, Hot stuff, LLMs, News, open source, penetration testing, software /

DarkMoon: Open-source AI pentesting platform 2026-06-29 at 08:30 By Mirko Zorz Penetration testing has long run on expert time, with specialists spending days probing a network or web application by hand. Manual engagements stretch across weeks, expert consultants run into thousands of dollars a day, and results vary with the tester. Automation promises to narrow

DarkMoon: Open-source AI pentesting platform Read More »

Scroll to Top