Tag: open-source
-
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster
CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/cisa-scubagear-scubagoggles-update/
-
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/abusebox-open-source-ip-blacklist-monitoring/
-
Before you file that AI bug report, OpenAI has some advice
Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination. First seen on cyberscoop.com Jump to article: cyberscoop.com/openai-ai-generated-bug-reports/
-
Brotli bug reaches far beyond Node.js (CVE-2026-111497)
A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497 Alternatively known as … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/node2shell-broccoli2shell-vulnerability-cve-2026-111497/
-
Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks
Tags: access, ai, attack, authentication, backup, china, cloud, credentials, cyber, data, framework, hacker, microsoft, open-source, threatHackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant persistent credentials. Microsoft attributed the campaign to Storm-0940, a China-state-aligned threat actor using ARTEX, an open-source agentic AI framework, to accelerate downstream attacks against more than 2,250 tenants. Successful authentication, however, does not establish data theft. Huntress initially…
-
Experts temper emergency-level alarms over critical Brotli defect
The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild. First seen on cyberscoop.com Jump to article: cyberscoop.com/brotli-critical-vulnerability-decompression-library-node2shell-broccoli2shell/
-
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week. First seen on therecord.media Jump to article: therecord.media/litellm-hackers-ai-malware
-
How Luxembourg built a secure sovereign instant messaging service for residents
Luxembourg is rolling out a secure encrypted messaging service based on the open source Matrix protocol, for use by government, businesses and citizens, offering a sovereign alternative to WhatsApp and Signal First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652431/How-Luxembourg-built-a-secure-sovereign-instant-messaging-service-for-residents
-
Witness: Open-source framework for verifying how your software was built
Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/26/witness-open-source-software-supply-chain-tool/
-
AI slop is piling up highest on the biggest open-source projects
The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/26/linux-foundation-open-source-ai-slop/
-
Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes
Google has open-sourced the Elephant-Goldfish Model plugin, an internal tool that makes an AI coding agent write and defend a design document before it touches any code. The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/26/google-elephant-goldfish-model-plugin/
-
r/opensource bans AI projects, and solo devs go down with them
Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/26/reddit-r-opensource-ai-ban/
-
4 Flaws Found in Widely Used Health Data Exchange Software
Researcher: HAPI FHIR Vulnerabilities Put Patient Data, System Availability at Risk. Four vulnerabilities in a widely used open-source healthcare interoperability software could enable attackers to improperly access sensitive patient records, cross security boundaries separating healthcare organizations’ data and potentially disrupt services, according to new security research. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/4-flaws-found-in-widely-used-health-data-exchange-software-a-33192
-
China-Aligned Hackers Used Agentic AI to Target ConnectWise
Tags: access, ai, attack, china, cloud, credentials, framework, hacker, microsoft, open-source, supply-chainMicrosoft Ties Storm-0940 to Automated Intrusions Across Hundreds of Targets. Microsoft linked the ConnectWise supply chain compromise to China-aligned Storm-0940, which used the open-source Artex agentic AI framework to automate credential attacks, abuse trusted cloud applications and attempt access to more than 2,250 customer tenants at machine speed. First seen on govinfosecurity.com Jump to article:…
-
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
Tags: ai, attack, backup, breach, china, cloud, credentials, exploit, framework, group, microsoft, open-source, penetration-testing, supply-chain, toolChina-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain compromise. The group used ARTEX, an open-source AI-driven penetration testing framework, to run attacks…
-
How PHP’s Coordinated Disclosure Process Went Belly Up
Open-Source PHP Team Also Admits to Decision Paralysis After 1 Flaw Found in 2024. The PHP Foundation said its coordinated vulnerability disclosure process for PHP2Shell worked, until it didn’t. A demonstration video of a binary update spilled early. Cybersecurity experts have since discovered exploit attempts that predate even those leaks. First seen on govinfosecurity.com Jump…
-
What is PHP and how serious is the computer language flaw causing website shutdowns?
Tags: attack, computer, cyber, data, exploit, flaw, government, hacker, open-source, programming, vulnerabilityAn estimated 70% of websites use the open-source language. What is the identified vulnerability in it?Website owners faced millions of attempts to exploit a serious security vulnerability in their programming language, it has emerged, triggering a rush by governments and businesses to fix the problem.The <a href=”https://www.theguardian.com/technology/2026/oct/21/flaw-in-php-computer-language-leads-to-shutdown-of-websites-around-world”>newly discovered vulnerabilities in PHP, a programming language that…
-
New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619
Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/22/php2shell-scanner-tool/
-
Anthropic finds 94 cases where open-source projects drop security controls without warning
Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/22/anthropic-attack-surface-reduction-open-source/
-
Info-stealing malware slipped into OVHcloud CLI releases on GitHub
OVHcloud, the French cloud computing and web hosting company, alerted customers that a hacker tampered with its open-source command-line interface (CLI) tool to spread … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/21/ovhcloud-cli-github-malware/
-
Safari blocks trackers that turn your email into a tracking ID
Apple’s new anti-tracking protections in Safari and WebKit, the open-source web engine used by Safari, block connections to identity resolution services that turn email … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/21/apple-safari-tracking-protection/
-
DevGuard: Open-source vulnerability management for the software supply chain
DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/21/devguard-open-source-vulnerability-management/
-
Google open-sourced TorchTPU, so PyTorch on TPUs just got a lot easier
Google released TorchTPU as open source, giving PyTorch developers a native way to run models on the company’s Tensor Processing Units. Google also announced TPU support in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/21/torchtpu-pytorch-on-tpus/
-
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ovhcloud-cli-releases-backdoored-on-github-to-steal-developer-secrets/
-
OpenCode hack exposes API keys amid AI distillation attacks
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/
-
OpenCode hack exposes API keys amid AI distillation attacks
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/
-
Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
San Rafael, United States, October 19th, 2026, CyberNewswire Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, memory exhaustion and memory-safety bugs in security-critical code without a running application. In its first open source research run, it found High or Critical issues in 45% of the projects tested,…
-
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file.The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps First…
-
Hackers Use Claude, DeepSeek and Grok in AI-Assisted Attacks on South Korean Banks
Hackers linked to attacks on South Korean banks used Claude Code, DeepSeek, Grok, and Zhipu AI alongside ARTEX, an open-source AI penetration testing framework. The campaign shows how attackers can combine AI services with familiar hacking tools to search for weaknesses across different systems, while leaving evidence that helps investigators trace their work. Public reporting…