Security
A critical remote code execution (RCE) vulnerability has been identified in Hitachi Energy's SOI product versions 2.0.0 to 2.2.0, stemming from an Apache ActiveMQ component. This vulnerability allows authenticated attackers to execute arbitrary code on the broker's JVM, posing significant risks to s
AI
Cloudflare has acquired Deno, with the aim of leveraging its open-source project 'celld' to advance self-hosting capabilities for Cloudflare Workers. However, Deno's runtime will not be actively maintained beyond the next year, shifting focus to the development of celld.
Research
This analysis examines the U4RASD team's submission to KnowledgeGraphEval-2026 Subtask 2 on directed Arabic relation extraction. The paper outlines the use of encoder-based and large language model (LLM) approaches for predicting one of 40 relations or no_relation from an Arabic sentence and a subje
Development
Valkey, a fork of Redis launched over two years ago, has evolved significantly with improvements in throughput, cluster functionality, and plans for features like synchronous replication and tiered storage. The project emphasizes security and release efficiency through automation.
Community
Skills Hub is a cross-platform desktop application designed to centralize and synchronize AI agent skills across multiple coding tools. It allows users to install skills once and sync them to various AI coding platforms, offering a streamlined approach to managing AI agent capabilities.
Open Source
Ghost has been recognized by the Digital Public Goods Alliance (DPGA) as a digital public good, affirming its commitment to open source principles and its role in supporting global publishing initiatives.
Infrastructure
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta, allowing node components to run as non-root users within Linux user namespaces. This change aims to mitigate container-breakout vulnerabilities and improve security in production and shared environments.
Cloud
AWS continues to expand its AI and cloud offerings with the general availability of OpenAI GPT-6 Astra on Amazon Bedrock, the launch of Amazon Quick desktop app, and new initiatives like Kiro for students. These updates reflect AWS’s ongoing commitment to integrating advanced AI models into enterpri
Hardware
NodeWright is an open-source, Kubernetes-native package manager that declaratively configures and updates host operating systems across GPU clusters without disrupting workloads. It integrates with NVIDIA AI Cluster Runtime and supports progressive rollouts using DeploymentPolicy resources.
Security
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The 'Horizons of Identity Security' report from SailPoint highlights a critical 'velocity paradox,' in which organizations invest in
Data
Redis has identified and remediated a use-after-free vulnerability in TLS pending-data processing, which could allow an authenticated attacker to execute remote code under specific conditions. The vulnerability has been assigned a revised CVSS score of 7.5 (High) following further review.
Research
The perturber tool introduces a stateless service and Python library designed to apply single, semantics-preserving text perturbations. It offers a catalog of 68 perturbations across 11 families, enabling systematic evaluation of model robustness by isolating the impact of individual perturbations.