Lovable's API exposed source code and database credentials for 48 days after the company closed a bug report. Up to 62% of AI ...

Cursor, the popular AI coding assistant platform, has tapped a new security partner to reduce the risk that developers pull ...

A pair of security vulnerabilities discovered in the GitHub environments of two very popular open source projects from Apache and Google could be used to stealthily ...

If combating attacks and hijackings of legitimate software on open source registries like npm weren’t challenging enough, app makers are increasingly experiencing the consequences of software ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published research looking into 172 key open-source projects and whether they are susceptible to memory flaws. The report, cosigned ...

CISA Report Finds Most Open-Source Projects Contain Memory-Unsafe Code Your email has been sent Analysts found that 52% of open-source projects are written in memory-unsafe languages like C and C++.

'Like handing out the blueprint to a bank vault': Why AI led one company to abandon open source ...

Open-source code runs on every computer on the planet—and keeps America’s critical infrastructure going. DARPA is worried about how well it can be trusted It’s not much of an exaggeration to say that ...

More than half (52%) of critical open source projects contain code written in a memory-unsafe language, according to a new analysis by the Cybersecurity and Infrastructure Security Agency (CISA) in ...

From fine-tuning open source models to building agentic frameworks on top of them, the open source world is ripe with projects that support AI development. For several decades now, the most innovative ...