A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...

Compliance continues to drive adoption of trusted open source: We saw the same themes from December present here, underscored ...

OpenAI Group PBC today announced plans to acquire Astral Software Inc., a startup with a set of widely used Python development tools. The terms of the deal were not disclosed. Astral’s development ...

How AI has suddenly become much more useful to open-source developers ...

Yesterday, I wrote about a 2-year-old open-source hardware ESP32-based DAB+ receiver project, but it turns out there's also a ...

Truelist releases 20+ free, open-source SDKs and framework integrations for email validation — Node, Python, React, ...

Marimo CVE-2026-39987 exploited within 10 hours of disclosure, enabling unauthenticated RCE and credential theft, emphasizing urgent patching needs.

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

Although executed by different attackers – Axios by North Korean-linked goons, and Trivy et al. by a loosely knit band of ...

The PyTorch Foundation also welcomed Safetensors as a PyTorch Foundation-hosted project. Developed and maintained by Hugging ...

Open-source orchestration platform Kestra raises $25M Series A led by RTP Global. The Paris-founded company has grown ...

Mark Collier briefed me on two updates under embargo at KubeCon Europe 2026 last month: Helion, which opens up GPU kernel ...