2+ day, 16+ hour ago  (23+ words) A maximum-severity vulnerability in Drupal has triggered emergency updates across the wider open-source PHP ecosystem, exposing risks tied to dependency-chain...

2+ day, 16+ hour ago  (21+ words) Researchers at Hidden Layer have disclosed a critical flaw in Chroma DB that allows attackers to execute malicious AI models before authentication, exposing...

2+ day, 16+ hour ago  (204+ words) Anthropic has acquired Stainless, the company behind official SDK pipelines used across Open AI, Google Gemini and Meta Llama APIs, marking a major shift in the open-source and developer infrastructure landscape surrounding AI platforms. The acquisition places a competitor-controlled layer…...

6+ day, 13+ hour ago  (677+ words) One of the aims of responsible AI is to make sure no injustice creeps into the data that large language models are based on. Fairlearn is an open source tool that can help with this. The amount of data that…...

1+ week, 2+ day ago  (200+ words) Linux and open-source developers are pushing back against Colorado's proposed age-verification law, warning it could restrict root access, burden small OS vendors, and undermine open-source learning and experimentation. Colorado lawmakers introduced bill SB26-051 in January, proposing that operating systems collect users…...

1+ week, 2+ day ago  (206+ words) Browser Act has open-sourced two AI-agent Skills on Git Hub that enable agents to interact with the live web, bypass common automation barriers, and generate reusable web automation tools without rewriting code for every site. Browser Act, developed by ECOCREATE…...

1+ week, 2+ day ago  (208+ words) Open Squilla has launched a self-hostable open-source AI agent runtime designed to cut enterprise token costs through intelligent model routing, multi-tier memory, and secure syscall-level isolation. Open Squilla has released the first public version of its self-hostable, open-source AI agent…...

1+ week, 2+ day ago  (285+ words) Moonshot AI has launched Kimi Web Bridge, a local-first browser automation platform powered by its open-source Kimi models, as Chinese AI infrastructure begins challenging US proprietary systems in coding benchmarks and enterprise AI tooling. Moonshot AI has launched Kimi Web…...

1+ week, 2+ day ago  (182+ words) Google's Threat Intelligence Group (GTIG) has disclosed the first publicly confirmed AI-assisted zero-day exploit, involving a Python-based 2 FA bypass in a widely used open-source web administration tool. Google coordinated disclosure and patching before large-scale exploitation campaigns began. The disclosure is…...

1+ week, 3+ day ago  (208+ words) Open AI said no customer data was compromised after attackers used malicious open-source Tan Stack npm packages to target employee devices in a broader "Mini Shai-Hulud" software supply-chain campaign. Open AI said it found no evidence that customer data was…...