Search
5 stories found
OccupySaaS describes itself as a group of laid-off engineers who use AI agents to clone paid SaaS from public docs. Its Auth0-compatible identity server reached release candidate 1 on November 4. It's Apache-2.0 and written in Go, and it already works with Auth0's own SDKs. The project says it isn't production-ready, and it isn't yet.
The MIT-licensed AiSOC ingests security telemetry, runs thousands of detection rules, has LLM agents investigate alerts and keeps a human in charge of any response. It runs on a laptop-class Docker setup with a small local model — here's what it does, what it needs and where it falls short.
CISA added CVE-2026-119977, a race condition in WordPress core's own updater, to its Known Exploited Vulnerabilities catalog on November 3. It affects WordPress 4.7 through 7.1.3 and can give an unauthenticated attacker code execution during a core update, so every self-hosted site should confirm it is on 7.1.4 or its branch's latest release.
Chip-design startup Ricursive has released Ripple-65B Preview, a 65-billion-parameter dense model it says tops every U.S. open-weight model on TerminalBench 2.1 and is small enough to run on a DGX Spark. The numbers are the company's own; here is what they show and what is still missing.
CISA has added CVE-2026-97229 to its exploited-vulnerabilities list after an attack on Alpine Linux's GitLab server. The flaw lives in Ruby's regex engine, so self-built and custom GitLab images can stay vulnerable even on a "fixed" version number.
