open-source software

Nvidia has introduced an open-source platform designed to make AI agents safer to deploy, giving developers tools to test and guard against unsafe behaviour. The move, reported by SC Media, positions Nvidia alongside other major tech firms racing to address security and reliability concerns as autonomous AI systems spread across enterprise software.

Nvidia has released a new open-source framework aimed at improving the security of artificial intelligence systems. The tool is intended to help developers identify and address vulnerabilities in AI applications. Details about the framework's features, supported platforms, and initial adoption remain limited, but the move aligns with the broader industry push toward safer and more transparent AI development practices.

GitHub says it discovered 24 vulnerabilities in Android using its open-source AI security agent, describing it as automated vulnerability discovery at scale on real production software. The company published details in a blog post, and the report is drawing attention as a notable demonstration of AI agents doing practical security research on widely used code.

Manifest has joined Chainguard's Athena Coalition, an initiative aimed at identifying open-source software risk inside commercial software products. The announcement was carried by Business Wire and picked up by outlets including Yahoo Finance. The coalition brings companies together to improve visibility into the open-source components embedded in software supply chains, a growing concern after a series of high-profile supply chain attacks.

The Clop ransomware gang has moved to new server infrastructure after exploiting a vulnerability in Grav CMS, the open-source flat-file content management system. The extortion group, known for large-scale data-theft campaigns against corporations and government agencies, is continuing operations despite the disruption. Security teams are being urged to patch Grav CMS installations and review whether their systems were targeted.

The VLC media player has released version 3.0.24, which patches more than 130 security vulnerabilities. The update is drawing attention on security and open-source forums, with users urging others to install it promptly as part of the latest patch wave. VLC is one of the world's most widely used media players, so the scale of the fix list makes the release notable for both private users and administrators.

The Netherlands is building an alternative software ecosystem based on NixOS after US sanctions on the International Criminal Court made Microsoft's products unavailable to Dutch government agencies tied to the ICC. Trial programs are already running, with a first release expected at the end of 2027, marking a significant shift toward open-source infrastructure in European government IT.

US sanctions on the International Criminal Court, based in The Hague, have blocked the court from using American software, prompting the Netherlands to build an alternative government software ecosystem based on NixOS. Trial programs are underway now, with a first release expected at the end of 2027. Commenters see it as a notable example of US sanctions backfiring, accelerating European moves away from Microsoft and toward open-source alternatives.

Version 18.1 of GDB, the GNU Project Debugger, has been released, announced via the gdb mailing list on sourceware.org. GDB is a widely used tool for debugging programs written in C, C++ and other languages, and the point release updates the long-standing open-source debugger. Developers have taken note of the announcement, which marks the latest refresh of a core piece of the free software toolchain.

An engineer who spent sixteen years at Collabora has announced he is leaving to start his own business focused on software engineering in the age of AI. He is also stepping down as maintainer of WirePlumber, the PipeWire session manager, with Julian Bouzas, who has worked alongside him since 2019, taking over the project.

Prividium has released the core engine of its platform as open source, following its first live deployment. The move means developers and organisations can now inspect, use and build on the underlying code themselves. Details beyond the announcement, including the engine's exact function and where it was first deployed, remain limited.

Technologia Incognita, a hackerspace in Amsterdam, is hosting a 'TechInc 3D Sunday' gathering on 1 November 2026. The event is listed on foss.events, a calendar for free and open-source software meetups, and has been announced within the FOSS community. Details about the programme have been shared via the event listing for those interested in attending.

Software engineer Evan Schwartz has published a blog post urging makers of Jev-style AI models — lightweight open models whose efficiency drives heavier overall usage, echoing the Jevons paradox — to add prompt caching. Caching previously processed prompts would cut redundant computation, lower latency and reduce serving costs. The post is being shared among AI and open-source engineering communities, where efficiency and inference costs are active topics of debate.

A security advisory, EUVD-2026-89198, flags an out-of-bounds read vulnerability in MobilityDB version 1.3.0 and earlier, located in the MEOS binary and library WKB deserialization logic. The flaw carries a CVSS v3.1 score of 7.1, marking it as high severity. The advisory was updated on 2026-09-29, and users of the open-source moving-object database extension are being urged to check for patched releases.

Hugging Face has launched Microduck, a small open-source robot. Details beyond the announcement remain limited, but the release fits the company's push into affordable robotics hardware alongside its AI model ecosystem. Early coverage in technology outlets is highlighting the device as another step in Hugging Face's effort to make robotics tools accessible to developers and hobbyists.

The Dutch government has chosen NixOS, a highly configurable Linux distribution, as part of a transition away from Microsoft Office, according to a report from The Stack. The move signals a shift toward open-source infrastructure in public administration, though details on the timeline, scope and which agencies are affected have not been made clear in the available reporting.

A technology community member has published a personal essay describing their path in tech and the free and open-source software tools they rely on. The piece, titled 'Forging Free Software: A bit of my story in tech and the tools I use', offers a first-person account of working with free software rather than reporting news, and has so far drawn only modest attention.

The Netherlands is reported to be moving away from Microsoft software and adopting NixOS, an open-source alternative, as a result of US sanctions. The claim, circulating in technology circles, suggests compliance concerns with American restrictions are driving Dutch institutions to reconsider dependence on US software vendors. Details about which agencies are affected and the scale of the shift are not confirmed.