open-source projects

OpenAI has launched Patch the Planet, part of its Daybreak cybersecurity program, to help open-source projects combat bugs.

NLnet has announced funding for 67 additional open-source projects. The organization continues its support for open-source initiatives through this new allocation.

The article highlights 15 open-source projects that serve as critical infrastructure for the internet, including web servers and encryption protocols, emphasizing their foundational yet underappreciated role.

Microsoft temporarily removed some GitHub repositories after a security incident compromised 73 open-source projects with an information stealer. The company prioritizes protecting customers and the ecosystem during the ongoing investigation.

Anthropic plans to release Mythos-class AI models to the public once safety safeguards are developed, but acknowledges current risks. The models, highly effective at finding software vulnerabilities, are currently restricted via Project Glasswing due to misuse concerns. Governments and security experts have responded with heightened scrutiny and action.

An investigation reveals a growing trend of fake star manipulation on GitHub, where developers pay for artificial repository popularity to boost visibility and credibility. Services offering paid 'star' promotions have raised concerns about ethical practices and the integrity of open-source project rankings.

Microsoft has suspended developer accounts for high-profile open-source projects without proper notification, blocking them from publishing updates and security patches. The action affects the ability of these projects to maintain Windows software builds and patches.

AI models have improved significantly in generating and evaluating code, leading to an influx of bug reports that require human verification. Open-source projects now face increased workload as maintainers must review AI-generated outputs despite their high quality.