Search
22 stories found
CISA has added CVE-2026-97229 to its exploited-vulnerabilities list after an attack on Alpine Linux's GitLab server. The flaw lives in Ruby's regex engine, so self-built and custom GitLab images can stay vulnerable even on a "fixed" version number.
DeepSeek's Harness team published an MIT-licensed research prototype that watches a GitHub repo, takes authorized requests and answers with pull requests. It passed 11,000 stars within days — but DeepSeek itself says it is not production-ready and runs with full user access.
OmniDiff, an AGPL-licensed terminal diff tool, parses your code to show what changed instead of which lines moved. It can also compare pictures, fonts and the members of an archive. Version 0.3.0 shipped November 1 and drew more than 300 points on Hacker News. Its speed numbers are impressive, but its own README says accuracy targets aren't met yet.
A polished, ad-free, offline-capable vocabulary app — and the more interesting part is that its words, illustrations and audio are released under CC BY 4.0 for anyone to build on.
An open-source scanner compares your system against ~12,400 published indicators from 25 sources — without sending anything anywhere. What it can find, what it can't, and how to run it in five minutes.
Colibri, a dependency-free C engine that keeps mixture-of-experts weights on NVMe and loads them on demand, is back on GitHub's daily trending list at about 47K stars. It really does run frontier-size open models on ordinary hardware, but independent tests show giant models crawl well below one token per second.
Three small projects from this week's GitHub trending list that are clever, useful, or both — with what they do, how they work, and the catches.
Anomaly's open-source Hex lets you hold a key, talk, and have text pasted into any app without sending audio to the cloud. Version 3.0 brings one app to Mac, Windows and Linux, and it was one of GitHub's fastest-climbing repos on November 2.
Floorplan, a free MIT-licensed plugin, scans your repo locally and has your coding agent label every part, producing a browsable map with a security health check. It was one of GitHub's top trending repos on November 2.
NOIR, a new MIT-licensed desktop tool, scans an Android phone over USB debugging and links each app's sensitive permissions to the tracking and ad domains hard-coded in its code. It went from zero to about 1,800 GitHub stars in four days. It's a useful map of risk, but its findings show what apps can do, not proof of what they actually sent.
agent-desktop, an Apache-2.0 Rust CLI from Vercel Labs, gives coding agents structured, ref-based control of native desktop apps without a vision model. It added about 2,300 stars in a day and was GitHub's top trending repo on November 3.
A detailed bug report shows Postman 12.33.4 auto-installed its AI agent plugins into Codex and Claude Code for an existing user, added a startup hook that steers API work through Postman, and ran installer code that pre-approves that hook. Postman says it will make opt-in clearer. If you use Postman and a coding agent, check four files.
The MIT-licensed AiSOC ingests security telemetry, runs thousands of detection rules, has LLM agents investigate alerts and keeps a human in charge of any response. It runs on a laptop-class Docker setup with a small local model — here's what it does, what it needs and where it falls short.
A plugin that watches what your agent does, compresses it into searchable memories in a local SQLite database, and feeds the relevant bits back into your next session. How it works and what to watch out for.
Researchers found a malicious instruction file that tricked a coding agent into installing an unauthorized npm package — and reproduced it with a 90% success rate. Five settings that close the hole.
The third-generation Maia is built for inference, claims 40% more tokens per megawatt than leading GPUs, and is headed for multi-gigawatt deployment in 2027. You won't rent one — and that's the point.
A CVSS 10 missing-authentication flaw in Siemens' SIMATIC IoT2050 Advanced gateways, CVE-2026-58115, is now being exploited, according to threat-intel firm VulnCheck. The attack is a single request to Node-RED's admin API, so any Node-RED instance left without a password is exposed in the same way.
Attackers are using a flaw in Cisco's Secure Firewall remote-access SSL VPN to reboot firewalls without logging in. Only devices with secondary authentication on a tunnel group are exposed, so a two-minute config check tells you how urgent this is.
MIT CSAIL researchers say OpenAI's GPT-6 Astra can identify what small networks do from their raw weights and edit a Qwen model to fix its math. The headline result, a jump from 7.9% to 48.1% on MATH-500, came from Python tooling and 50 forward passes, not from reading raw weights. Here's what each setup showed.
Anthropic has open-sourced FlashProve, a research prototype that produces cryptographic proofs that a specific model generated a specific answer, without revealing the weights. It works on a 400B-parameter open model on one H100, but it costs about 70–95 times more GPU time than serving the model, and nobody has said they will deploy it.
Microsoft Threat Intelligence has graded eight North Korean groups on how deeply they use AI. The findings — bulk-generated lures, AI-coded malware, fake recruiters and an open-source agentic attack framework — show where defenders should tighten up now.
Apple's WebKit team says Safari 27.3 beta can repaint light-only websites dark when your device is in dark mode. Here's what it changes, where the setting lives, and the one line site owners can add to keep their design as authored.
