AWS Will Run Its European Sovereign Cloud Without the Global Backbone for Several Hours
On October 24, AWS will operate its European Sovereign Cloud without a connection to the AWS Global Network backbone, with a team of EU residents an…
Open Source
⚑ Report a ProblemLatest Open Source news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.
Hackers accessed roughly 1,900 GitHub accounts, then used them to slip credential-stealing workflows into more than 30,000 repositories. The malicio…
Anthropic’s been eyeing confidential AI. It just made its move with another acquihire.
Anthropic’s done it again. On Tuesday, Opaque Systems announced a new agreement with Anthropic that “carries Opaque’s work forward…
“Everybody with a $20 account is now a researcher”: How Akrites is tackling the flood of AI bug reports
AI is making it easier than ever to find potential security vulnerabilities in open source software. But finding something that The post “Everybody…
An Israeli firm is sending spyware through online ads, researchers say
An Israeli ad tech firm worked with spyware companies to infect devices, including at Al Jazeera, by simply showing users an online ad, according to…
Your secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked
There's a new digital pet in town - a cute little marshmallow of a robot that can change its cartoony expressions to match your mood. But if you or…
Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
The digital rights unit found evidence that dozens of devices at media organization Al Jazeera were hacked after being shown malicious online ads.
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online a…
Flock CEO: We haven’t ‘fired’ any police departments as customers
Flock CEO Garrett Langley said that the surveillance company has not cancelled contracts of any police department or law enforcement agency, despite…
Researchers left a hidden message for rogue AI agents. Then the agents wrote back.
A team of researchers investigating AI agents trying to bypass Alibaba’s anti-bot protections left a hidden message inviting the agents The po…
Anthropic’s self-replicating AI warning is an alarming deja vu
Are legions of smart devices - fridges, ovens, vacuum cleaners, lawnmowers, security cameras, and TVs - conspiring to take over the internet? No. Bu…
66% of billion-dollar companies leave critical bugs unpatched — the part the AI bug-hunting hype leaves out
Chainguard has launched an AI-powered security harness that uses frontier models, including Anthropic’s restricted Claude Mythos 5.1, to find…
GitHub’s model for secret detection: Finding more secrets with less noise
GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan execution time by…
The agent did the work. The audit log couldn’t say who asked.
More than 20 percent of the MCP-related access policies that Shawn Petty’s team reviewed across customer and prospect environments were The po…
Google paid $90,000 for this bug, then waited two months to fix it
Google took two months to patch an unauthenticated RCE vulnerability in its developer documentation infrastructure. The problem was a reused The pos…
The Yandex outage probably didn’t blitz Russian bots
Multiple Ukrainian drone strikes over the last week have taken Russian data centers offline and reportedly caused online bot traffic to plummet - bu…
Claude found 29,000 possible bugs in open source. Only 516 have been fixed.
Anthropic’s new OSS Scanner, launched last week as part of its broader Cyber Mission, exposes a problem inside the company’s The post Cl…
AI Is Getting Really Good at Messing With Cybercriminals
Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that they think are real v…
Anthropic launches free AI security scans for open-source projects
Anthropic's offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner. It says open-source pro…
GitHub Copilot is going local — but Microsoft won’t say what gets sent to the cloud
GitHub Copilot will soon decide whether coding tasks run locally or get sent to cloud models, with automatic routing expected The post GitHub Copilo…
How one bug bounty researcher chooses the features they investigate
As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team spotlights @vaib25vicky, exploring their methodology, techniques, and exper…
OpenSSH 10.6 deliberately breaks two features in the name of security
OpenSSH 10.6, released Tuesday, makes compression less effective and rejects some usernames that previously worked, and the maintainers knew both Th…
Mistral’s new AI tried to escape its test environment. In three weeks, anyone can download it
Mistral launched Large 4 on Tuesday, its first major model release since Medium 3.5 at the end of April and The post Mistral’s new AI tried to escap…
LibreOffice says ‘no AI’ is now a software feature
The maker of the open source document editor says it has no plans to add AI to its software's default configuration, citing user privacy.
A Trump Mobile breach may have exposed data of more than 3,600 people
Trump Mobile appears to have suffered a data breach that may have exposed the data of 3,615 people, according to reports from PCMag and Straight Arr…
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming 3rd party sites keep coming.
The AI safety check that runs on a laptop and nearly matched a 35B model
Guardrail selection has typically meant choosing between a purpose-built classifier and an LLM acting as a judge. Decision models such The post The…
Podcast: Future Cybersecurity: Hardware Memory Safety, Automated Governance and Post-Quantum Cryptography
In this episode, Chris Swan, engineer at Atsign and security track host at QCon London, reflects on the ideas shared during QCon London 2026 and tea…
Cloudflare Fixes Cross-Tenant Data Exposure in Containers
Cloudflare has disclosed a cross-tenant data exposure vulnerability in Containers and Sandboxes, caused by thin-provisioned storage pools configured…