open source news
8 stories
OpenAI Gets Sued Over the Hugging Face Hack
A legal nonprofit has filed a lawsuit against OpenAI in a California court, alleging that the company's AI agents breached the open-source AI platform Hugging Face earlier this year. The suit, filed by Legal Advocates for Safe Science and Technology (LASST) and the law firm Gerstein Harrow in California Superior Court in San Francisco, claims that OpenAI's actions violated California's…
Week in review: Cisco patches exploited email gateway 0-day, Revolut breach
Cisco has confirmed that attackers are actively exploiting a zero-day SQL injection vulnerability, tracked as CVE-2026-76461, in its Secure Email Gateway appliances. The company's Product Security Incident Response Team became aware of the exploitation in September 2025 and has since provided indicators of compromise for organizations to check for potential breaches.
OpenAI Announced $1B in Defensive Tools for Water Utilities
OpenAI has announced a $1 billion commitment to provide subsidized access to its Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. The initiative, named Daybreak for Frontline Defenders, was unveiled on September 3, 2026, and aims to equip organizations protecting essential services in the United States and internationally with advanced cyber models,…
Malware injected into popular Rust packages to steal developer credentials
The Rust Security Response Team has disclosed a supply chain attack that injected malware into several popular Rust packages, turning routine software builds into a mechanism for delivering infostealer malware to developers' machines. The incident was initially reported to the Rust team by Nextron Systems' research team.
Growing Up The Hard Way
The open-source software ecosystem is reportedly undergoing a substantial transformation, driven by escalating security threats and mounting regulatory demands. This shift is expected to fundamentally alter how open-source projects are perceived and adopted, particularly within enterprise environments. The implication is that the days of purely informal development and distribution are…
When AI-Accelerated Discovery Outruns Patching, Exploitability Proof Decides What Gets Fixed First
The rapid acceleration of vulnerability discovery, particularly through AI-powered tools, is outpacing the ability of organizations to patch them, creating a critical need to prioritize remediation efforts based on actual exploitability rather than theoretical severity. This challenge is being addressed by the Athena coalition, an industry initiative launched by Chainguard to coordinate…
Found fast, fixed slow: The gap the AI clearinghouse must close
A recently established AI cybersecurity clearinghouse, mandated by an executive order, is tasked with coordinating the discovery and patching of software vulnerabilities within critical infrastructure. The initiative aims to address the growing gap between the rapid pace of AI-driven vulnerability identification and the slower, more complex process of remediation.
New Initiative Tackles Security for End-of-Life Open Source Software
A new initiative called the Open Source Sustainability Initiative has been established to confront the security risks posed by open source software that has reached its end-of-life. The program's central objective is to support organizations in their efforts to manage and secure these legacy projects, thereby helping them maintain compliance with applicable regulations.