Linux, open source, and security news from across the web.
They point to MCP, built by two engineers in London, that ended up under US-based governance.
Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges. [...]
wiredmikey shares a report from SecurityWeek: Nvidia and a large group of technology, cybersecurity, and enterprise software companies have launched new initiative aimed at developing and sharing open source tools, models, and techniques for securing AI systems and agents. The ne…
Longtime Slashdot reader AmiMoJo shares a report from Hackaday: Community-led open source project hosting site Codeberg has formally announced that projects whose code is largely or fully machine-generated through LLMs and other 'AI' tools will no longer be welcome. This follows …
Fwupd 2.1.7 is out today as the newest update to this open-source firmware updating utility that pairs with the Linux Vendor Firmware Service (LVFS) for offering a nice firmware upgrade story on Linux systems...
Version 2.47 of GNU Binutils has been released. In addition to the usual bug fixes there are some notable new features in this release including added support for a number of RISC-V standard extensions, a command-line option (-M annotate) which displays the symbol for undefined i…
The FreeBSD project published today their Q2-2026 status report that highlights all of their interesting open-source development initiatives for the past quarter. A lot is happening including FreeBSD seeing an AMD ROCm port and also their own NTSYNC driver being created...
NVIDIA and more than two dozen other companies have started the Open Secure AI Alliance for helping to keep open-source AI models secure. The other founding members range from Microsoft to Adobe, IBM, Red Hat, SpaceX, OpenClaw, Palantir, and others...
Along with this weekend's release of GNU C Library 2.44, the GNU Binutils 2.47 release is also now available for this important set of binary utilities common to Linux systems and other platforms with the GNU toolchain...
Comments
Comments
Auto-CPUFreq is one of the open-source projects striving to be a CPU speed and power optimizer for Linux systems to improve battery life without making any real compromises to the user experience. Out today is v3.1 as the newest feature release of Auto-CPUFreq...
Comments
Version 2.44 of the GNU C Library has been released. Changes include a new /etc/tunables.conf file for the system-wide setting of tunable parameters, a new tunable to control the use of transparent huge pages for read-only executable segments, a number of math-function improvemen…
GNU developers today released GNU C Library "glibc" 2.44 as the newest feature release for this critical library to modern Linux systems and other platforms...
Wine 11.14 was tagged today as the newest bi-weekly development release of this open-source software for running Windows games and applications on Linux, macOS, and other platforms...
A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance. [...]
This release contains everything you need to scope your first pentest, work with a vendor, execute, and get the types of reports you need from an external tester. This will enable you to perform your first product or infrastructure level penetration test, and provide you with a p…
Fedora contributor Simon de Vlieger has published a blog post with a walkthrough of how the project turns source code and packages into the final release that users install on their systems. It follows the a package from a packager's git push to a composed release: ISOs, cloud im…
At this week's AMD Advancing AI 2026 event, "AI" was mentioned thousands of times in talks and in demos. As expected. Beyond that, the other term likely most heard during the event was "open"... Not particularly new for AMD with their long history of open-source efforts but I'd w…
Caught this in three open directories on a Hong Kong server, exposed July 9 to 13. The agent is Hermes, open source, and the recovered logs show it running LinPEAS and walking a ministry web root without a human in the loop. Target was Thailand's Ministry of Finance. submitted by…
Comments
Comments
Comments
Torvalds's love-hate relationship with AI continues.
Following the recent code branching for the LLVM 23 series, LLVM 23.1-rc1 was released today in working toward the next stable release of this open-source compiler stack...
While the VideoLAN developers are busy these days working on dav2d for AV2 video decoding, they haven't let up work on dav1d and recently released dav1d 1.5.4 for continuing to enhance this leading open-source, CPU-based AV1 decoder...
The departures come just months after the project flagged burnout as a growing risk.
Just one week after releasing Lemonade 11.0, the Lemonade 11.5 local AI server was released today for this open-source AMD backed project during their AMD Advancing AI event...
Jack Dorsey's Block has launched Buzz, an open-source workplace collaboration platform that combines messaging, project management, and software development workflows for teams of both humans and AI agents. Dorsey described Buzz as "a new groupchat platform for teams of people an…
Comments
A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's "get_log…
Comments
An Android app that can draw over other windows and write to shared storage can slip instructions to the AI agent driving that phone, in text no human eye will ever see. Two more steps, and the same app is running commands on the PC driving the agent. Researchers demonstrated tha…
InputPlumber is out with its newest feature release. As a reminder, InputPlumber is the open-source input router and remapper daemon for combining various input devices from gamepads to mice and keyboards as well as the ability to emulate them...
Comments
Moonshot AI has temporarily paused new subscriptions for its Kimi K3 model after demand surged beyond the company's current capacity within days of the launch. The open-source Chinese AI model, described as one of the largest of its kind at 2.8 trillion parameters, has rattled U.…
Celebrating $100 million contributed by the community to the people who build and sustain open source every day. The post $100 million for open source: A milestone built by the community appeared first on The GitHub Blog.
Comments
While openSUSE is closely aligned with SUSE as a company, they aren't the exclusive sponsor of this free and open-source Linux distribution with its rolling-release Tumbleweed and Leap stable releases. AMD has been a longtime major supporter of openSUSE and the Fastly content del…
Releasing a detector for prompt injection and jailbreak attempts against LLM inputs, under Apache-2.0. The security-relevant bits: - Defence in depth rather than one model. A regex fast-reject layer (~430 patterns covering direct overrides in ~11 languages, DAN/persona jailbreaks…
A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations to Google's open-source Gemini CLI artificial intelligence (AI) and commandeered a live botnet. The findings come from an analysis of 200 Gemini CLI session logs between March 19 and…
Comments
In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system. The company said it detected and responded to the incident targeting its production infrastructure earlier la…
ZDNet reports on June's Open Source Summit India 2026 in Mumbai, where Linux stable kernel maintainer Greg Kroah-Hartman gave a talk titled "Rust and Linux: How the Rust Language is Going to Help Linux Succeed." Kroah-Hartman said in his keynote that "the [Linux] kernel is moving…
An anonymous reader shared this report from Tom's Hardware: The Zilog Z80 has just turned 50 years old. This iconic 8-bit processor first went on sale in July 1976 and stayed in production for 48 years until Zilog, now a Littelfuse subsidiary, stopped accepting orders in June 202…
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. This week in DistroWatch Weekly: Review: Smaller, community-oriented, open source solutions News: Haiku ports the NetBSD Virtual Machine Monitor, GNOME OS makes it easier to test experimental features, FreeBSD remov…
Long-time Slashdot reader theodp writes: Recalling his initial resistance to free and open software, billionaire computer scientist David Siegel argues vigorously in FORTUNE that the stakes are too high to let AI become increasingly closed. "In the 1980s, I had the chance to spen…
Thanks to the work of the open-source community, more ASUS desktop motherboards for Intel Core and AMD Ryzen systems are seeing working sensor monitoring under Linux. With the upcoming Linux 7.3 cycle, several additional ASUS motherboards will now enjoy working sensor monitoring.…
Elon Musk confirmed SpaceX has open sourced the Grok Build CLI this week, reports The Register, "just days after researchers caught the AI tool scooping up users' entire repositories and uploading them to company-controlled cloud storage." That discovery had "gathered so much neg…
The GNU Hurd project recently issued their Q2'2026 status report to outline recently development efforts. The Hurd is still happening!..
submitted by /u/mazen160 [link] [comments]
This week's batch of AMDGPU Display Core "DC" updates arrived heavy with 70 new patches for improving that open-source display support for Radeon graphics on the Linux desktop...
Comments
Comments
Linus Torvalds says the Linux kernel will not ban AI-assisted coding tools, and if anti-AI absolutists have a problem with that, they can "fork it" or "walk away." An anonymous reader quotes a report from Ars Technica: Writing in a lengthy post on the Linux kernel mailing list th…
On top of releasing ROCm 7.14 as the new production release of ROCm now built offTheRock, rolling out the Lemonade 11.0 local AI server, and GAIA 0.22, AMD has some more open-source news in the lead up to next week's AMD Advancing AI event...
Comments
Comments
A new open-source Linux driver announced today by Arm is the Arm Core Local Accelerator "CLA" driver as a CPU-local interface for programming attached accelerators. This is an agnostic interface for attached accelerators with the initial target focusing on an attached compute eng…