Tag: open-source
-
Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
Toronto, Canada, November 6th, 2026, CyberNewswire Free, read-only scanner helps organizations find Linux servers and container images exposed to two actively exploited vulnerabilities in PHP and Node.js Insignary, a global open-source security company, today released insignary-chk, a free tool that checks for PHP2Shell and Node2Shell, two recently disclosed runtime vulnerabilities affecting PHP and Node.js. PHP2Shell…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
ey Points Introduction ARTEX is a Chinese open-source, AI-powered penetration testing platform designed to help security teams assess systems they own or are authorized to test. It uses large language models (LLMs) to coordinate multiple AI agents that plan tests, run security tools, and record evidence of potential vulnerabilities. Its web dashboard brings together assets,…
-
Beyond Cold Storage: Why Hardware Wallets Need Open Source and Clear Signing
Hardware wallets protect private keys, but clear signing, open-source firmware and on-device verification let users see malicious crypto transactions. First seen on hackread.com Jump to article: hackread.com/hardware-wallets-need-open-source-clear-signing/
-
11 Digital Forensics Tools: The 2026 Buyer’s Verdict Guide
Forensic tooling is bought under two pressures that pull apart: caseload arithmetic (mostly mobile, always backlogged) and courtroom survival (every finding must outlive cross-examination). This verdict guide judges eleven tools commercial suites, frontline kiosks, and the open-source pillars every lab quietly depends on by lane, because “best” in forensics means best for the evidence type…
-
Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’
“Most of the risk is actually created by a couple of players building behind closed doors,” Clément Delangue said of the need for open source AI. First seen on wired.com Jump to article: www.wired.com/story/wired-world-fair-2026-clement-delangue-hugging-face/
-
Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’
“Most of the risk is actually created by a couple of players building behind closed doors,” Clément Delangue said of the need for open source AI. First seen on wired.com Jump to article: www.wired.com/story/wired-world-fair-2026-clement-delangue-hugging-face/
-
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Open source models are becoming more mainstream as enterprises, governments and startups alike rely on the promise of lower costs, more control, and more flexibility. But as increasingly capable models become more freely available, how do companies capture value? And with Chinese open models gaining ground, can American players keep up? On this episode of…
-
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Open source models are becoming more mainstream as enterprises, governments and startups alike rely on the promise of lower costs, more control, and more flexibility. But as increasingly capable models become more freely available, how do companies capture value? And with Chinese open models gaining ground, can American players keep up? On this episode of…
-
Open-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw
The rsync project released version 3.5.2, and it closes a flaw that let a connecting client tie up a server’s CPU with checksum math that leads nowhere. The new version also … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/04/rsync-3-5-2-released/
-
Ghostunnel: Open-source TLS proxy with mutual authentication
Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a backend, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/04/ghostunnel-open-source-tls-proxy/
-
Anthropic open-sources FlashProve, its provable inference prototype for MoE models
Anthropic’s Frontier Red Team, with collaborators at EPFL, MIT and StarkWare, built FlashProve, a prototype that produces a cryptographic proof that one specific language … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/04/anthropic-flashprove-provable-inference/
-
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on instances running older versions.”Our investigation found that these attacks targeted servers running BTCPay Server 2.4.1 (released on 23 July 2026) or earlier,”…
-
Fireperf: Open-source network testing tool for firewalls and routers
The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/03/fireperf-open-source-network-testing-tool/
-
Chinese hackers use ARTEX AI in automated attacks against 200 orgs
Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/
-
BTCPay Server warns of hot wallet crypto thefts on outdated instances
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining “hot wallets” on instances running older versions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances/
-
BTCPay Server warns of hot wallet thefts targeting outdated instances
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining “hot wallets” on instances running older versions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances/
-
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week.Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 through 1.12.8 has the flaws, and the only fix is version…
-
Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
Hackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate network intrusions against educational organizations across Africa and Latin America. The findings illustrate AI moving beyond attack preparation into operational decision-making. Published November 2, Kaspersky’s investigation describes a human-directed operation in which an LLM selects tools, generates commands, interprets results, and determines subsequent actions. The…
-
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/deepseek-dsh-superagent/
-
Byoky: Open-source wallet for AI API keys
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/byoky-open-source-ai-api-key-wallet/
-
Alpine Linux rebuilds GitLab after attempted RCE attack
Tags: attack, exploit, gitlab, hacker, infrastructure, linux, open-source, password, rce, remote-code-execution, vulnerabilityHackers attempted to exploit a critical GitLab vulnerability in Alpine Linux’s development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/alpine-linux-rebuilds-gitlab-after-attempted-rce-attack/
-
(g+) Open-Source-Ökosystem: KI-Agenten gefährden die Grundlagen von Open Source
Wie KI-Agenten das Wissen freier Softwareprojekte nutzen, deren Infrastruktur belasten und Maintainer mit automatisierten Beiträgen und erfundenen Fehlerberichten überschwemmen. First seen on golem.de Jump to article: www.golem.de/news/open-source-oekosystem-ki-agenten-gefaehrden-die-grundlagen-von-open-source-2610-214681.html
-
12 Threat Intelligence Platforms (TIP): The 2026 Buyer’s Verdict Guide
A TIP earns its keep in decisions changed per month blocks pushed, hunts launched, patches reprioritized and 2026’s field spans premium all-source graphs, open-source standards, exposure-fused challengers, and infrastructure-truth specialists, with ownership moves (Mastercard’s, Securonix’s) adding mandatory RFP questions. This verdict guide judges twelve platforms on operationalization, not feed counts. Actionable threat intelligence feeds provide…
-
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the…
-
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the…
-
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network.UEFI firmware is the software that runs first when a computer is…