open-source software

Nvidia has introduced an open-source platform designed to make AI agents safer to deploy, giving developers tools to test and guard against unsafe behaviour. The move, reported by SC Media, positions Nvidia alongside other major tech firms racing to address security and reliability concerns as autonomous AI systems spread across enterprise software.

GitHub says it discovered 24 vulnerabilities in Android using its open-source AI security agent, describing it as automated vulnerability discovery at scale on real production software. The company published details in a blog post, and the report is drawing attention as a notable demonstration of AI agents doing practical security research on widely used code.

Nvidia has released a new open-source framework aimed at improving the security of artificial intelligence systems. The tool is intended to help developers identify and address vulnerabilities in AI applications. Details about the framework's features, supported platforms, and initial adoption remain limited, but the move aligns with the broader industry push toward safer and more transparent AI development practices.

The Dutch government has chosen NixOS, a configurable Linux distribution, as the basis for a sovereign desktop strategy, aiming to reduce dependence on foreign software vendors such as Microsoft. The move aligns the Netherlands with a broader European push toward open-source digital autonomy. Technology observers see it as a notable endorsement of NixOS, which is less commonly used at government scale.

The Clop ransomware gang has moved to new server infrastructure after exploiting a vulnerability in Grav CMS, the open-source flat-file content management system. The extortion group, known for large-scale data-theft campaigns against corporations and government agencies, is continuing operations despite the disruption. Security teams are being urged to patch Grav CMS installations and review whether their systems were targeted.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

Manifest has joined Chainguard's Athena Coalition, an initiative aimed at identifying open-source software risk inside commercial software products. The announcement was carried by Business Wire and picked up by outlets including Yahoo Finance. The coalition brings companies together to improve visibility into the open-source components embedded in software supply chains, a growing concern after a series of high-profile supply chain attacks.

The VLC media player has released version 3.0.24, which patches more than 130 security vulnerabilities. The update is drawing attention on security and open-source forums, with users urging others to install it promptly as part of the latest patch wave. VLC is one of the world's most widely used media players, so the scale of the fix list makes the release notable for both private users and administrators.

The open-source Shotcut video editor has released version 26.9, bringing improvements to the VA-API HEVC hardware encoder on Linux and adding support for FFmpeg 9. Linux and open-source communities are sharing the update, which should appeal to users doing hardware-accelerated video encoding on free software platforms.

Prividium has released the core engine of its platform as open source, following its first live deployment. The move means developers and organisations can now inspect, use and build on the underlying code themselves. Details beyond the announcement, including the engine's exact function and where it was first deployed, remain limited.

The Document Foundation, the non-profit behind LibreOffice, published a blog post arguing that the absence of AI features is itself a selling point. The piece pushes back against the industry trend of adding AI to every productivity tool, framing LibreOffice's lack of AI as a deliberate choice that serves users who want predictable, privacy-respecting software.

US sanctions on the International Criminal Court have blocked the court from using American software providers, prompting the Netherlands to build an alternative software ecosystem based on the open-source NixOS operating system. Trial programs are already underway, with a first full release expected at the end of 2027. The move signals a broader European push to reduce dependence on US-based technology suppliers in the wake of escalating sanctions policy.

An Android user says no free and open-source camera app meets their needs, so they stick with Google's Pixel Camera. Open Camera is described as outdated and still built on the older camera2 API, LibreCamera is rarely updated, and Fossify feels generic. The complaint highlights a wider gap in the open-source Android ecosystem, where proprietary camera apps still lead on image quality and API support.

Version 18.1 of GDB, the GNU Project Debugger, has been released, announced via the gdb mailing list on sourceware.org. GDB is a widely used tool for debugging programs written in C, C++ and other languages, and the point release updates the long-standing open-source debugger. Developers have taken note of the announcement, which marks the latest refresh of a core piece of the free software toolchain.

The OpenShot open-source video editor has released version 4.0.1, now available for download. The update brings improvements to the timeline and zoom functionality, an updated Razor tool, and faster keyframe and color editing. It is being shared in Linux and open-source communities as a notable maintenance release for the free editing software.

UnoDOS, a small open-source DOS-style operating system published on GitHub by user hmofet, is drawing attention among retro-computing hobbyists on Hacker News. Discussion is light so far, with the project sitting in the mid-ranks of the front page. It is being shared as a curiosity for fans of minimal, single-purpose operating systems and classic microcomputer software.

An engineer who spent sixteen years at Collabora has announced he is leaving to start his own business focused on software engineering in the age of AI. He is also stepping down as maintainer of WirePlumber, the PipeWire session manager, with Julian Bouzas, who has worked alongside him since 2019, taking over the project.

Eight Dutch municipalities are running their office workstations on a homegrown Linux desktop instead of Windows. The move signals growing public-sector interest in open-source software in the Netherlands, driven by desires for digital sovereignty, lower licensing costs and independence from large US vendors. Officials say the rollout shows municipal administrations can function day-to-day on a fully open-source desktop environment.

A question is being raised in developer and open-source circles about whether recent criticism of generative AI tools is genuine technical critique or activism against AI. The debate touches on widely used coding assistants including Claude, Codex, Gemini, Deepseek and GLM, and reflects a broader split among programmers over the value and ethics of AI in software development.

A new open-source 3D modeling tool positioning itself as an alternative to SketchUp is drawing attention in the architecture and design community. Commentary from 3D modeling circles suggests the software could challenge Trimble's commercial hold on the easy-to-use modeling market, with many users welcoming a free, community-driven option.

AMD's ROCm software stack, normally tied to AMD GPUs, has been shown running on SiFive's BigSky datacenter development platform built around RISC-V processors. The development suggests growing compatibility between AMD's open-source compute tooling and RISC-V-based server hardware, a notable step for developers exploring alternatives to x86 and Arm in the datacenter.