Google suspend son bug bounty open source submergé par l’IA Face à un déluge de faux signalements générés par l’IA, Google a gelé les soumissions de failles visant ses logiciels open …

From Vulnerability Scanning to Verified Fixes: A Hands-On Guide to Securing an Ubuntu Web Server with Greenbone OpenVAS

Exploring how AI-powered vulnerability discovery could help secure open-source software — and why human verification still matters.

Canonical recently announced a groundbreaking milestone for the open-source community. The upcoming Ubuntu 26.10 release will finally introduce official RISC-V desktop images. Currently, developer…

The renowned password manager Bitwarden recently published a community announcement. It declared that, commencing with its forthcoming release, applications distributed across various digital stor…

The non-LTS Ubuntu 26.10 release is rapidly approaching. Consequently, developers have initiated the schedule for next year’s Ubuntu 27.04 iteration. According to the official release schedu…

How a symlinked keploy-logs.txt in a project directory could make root turn /etc/passwd world-writable.

How one chmod turned sudo keploy update into a path to root.

TL;DR Wazuh 4.14.8 fixes 15 security flaws in the open-source SIEM and XDR platform. Two of these Wazuh vulnerabilities score 9.4 on CVSS 4.0 and can lead to remote code execution as root. Several…

After an agonizing four-year hiatus, the Raspberry Pi Foundation has triumphantly resurrected a contemporary iteration of the Raspberry Pi Desktop. This operating system is specifically engineered…

They aren't hacking your computer. They're Googling you better than you Google yourself — here's exactly how they do it.

Walter Gómez — Parte 2 de 2 — Laboratorio reproducido en Proxmox con Wazuh 4.14.8

A technical walkthrough of the open-source, code-aware AI pentester — its agent architecture, its “no exploit, no report” philosophy, how…

How a multi-agent system plans, executes, and remembers autonomous penetration tests inside an isolated sandbox

GitHub Tightens npm Trusted Publishing Rules GitHub has changed the rules for npm trusted publishing. A new configuration that does not complete its first successful publish within 48 hours will n…

By Ikram (@Ikram-4)

Meet AirTell: an open-source, LLM accelerated fork of NCCGroup's Sniffle unifying BLE 5 defense, counter-surveillance, and offensive sec.

Picture the desk in front of you right now…

TL;DR On October 16, 2026, Apache disclosed 12 Apache Kylin vulnerabilities, including a critical SQL injection flaw, CVE-2026-64959. Version 5.0.5 fixes all of them. Meanwhile, Apache Airflow pat…

OpenCode, the open-source coding agent, disclosed on October 17, 2026 that an intruder reached a legacy system on the night of October 16…