167 articles
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.
Zapscape could let guest root escape nested KVM and execute code on the Linux host through a shadow-MMU use-after-free; no in-wild exploitation is cla
Le composant noyau d'Open vSwitch, un logiciel réseau très répandu sur les serveurs Linux, contient la faille OVSwrap (CVE-2026-64531). Un compte utilisateur ordinaire, sans droit particulier, obtient par cette faille les privilèges root. Un correctif est disponible depuis le 24 juillet, mais toutes les distributions ne l'ont pas encore intégré.
How Red Hat AI enables production-grade AI agent observability.
Contribute to elastic/detection-rules development by creating an account on GitHub.
Kata Containers is an open source container runtime, building lightweight virtual machines that seamlessly plug into the containers ecosystem.
Today, we’re sharing GKE Agent Sandbox is now generally available, giving you a secure, scalable foundation for your agent workloads. Agent Substrate, a new open source project will continue to push the limits of agentic infrastructure density.
In contrast to what we observed in the open source ecosystem, GTIG assesses with high confidence that traditional software supply chain compromise, the manipulation of source code or update/distribution mechanisms (T1195.002), remains rare. The handful of identified cases in 2025 and early 2026 were predominantly cyber espionage incidents with intentionally limited targeting scopes. In the most significant case, North Korean threat actor UNC4899 reportedly used social engineering to compromise a
Free open source AI Second Brain that gives you unlimited, growing power. Constella uses local AI to index the contents of all your files and apps.
Kubeflow Trainer — Kubernetes-native distributed AI training platform
For a timely response to security incidents involving compromised accounts or stolen credentials, GitHub Enterprise owners can now use new “break-glass” capabilities to instantly revoke all credentials for a given…
i want the US to win in AI both in open source and proprietary models, and i am glad to see this
Contact information for Canonical, the publisher of Ubuntu.
CNCF community in Open Community Groups, where Open Source communities thrive.
Cloud Native Community Japan in CNCF community. Open Community Groups, where Open Source communities thrive.
CNCF community in Open Community Groups, where Open Source communities thrive.
This model works because it’s built on partnership: internal shepherds who invest in their people, and open source project maintainers who open the door for them to contribute. The trust between those two sides is what makes the structure hold.For companies, that matters. Open source sustainability requires more than dependency management, sponsorship, or a call for employees to “go contribute.” It requires a practical operating model. Organizations need repeatable ways to connect contributor in
WordPress Exploitation Underway (CVE-2026-63030), Author: Johannes Ullrich
Find new open source contributors to support.
What does this change? Adds Linux fetch multi payloads, an http-based payload that sends a query string along with the HTTP request for the payload identifying the target's architecture to the...
Add reverse_tcp and bind_tcp stagers and a shell command stage for both RISC-V 64-bit and 32-bit little-endian Linux targets. Stagers: socket -> connect/bind -> read 4-byte stage length ->...
CORTEX