Godot Engine formally banned AI-generated code from its open-source project on June 30, citing maintainer burnout and the inability of AI-reliant contributors to fix their own code. The policy prohibi…
Curl maintainer Daniel Stenberg, who has triaged over 1,000 vulnerability reports, published a field guide on how to report vulnerabilities effectively. The guide emphasizes making reports easy for ma…
OpenAI's GPT-5.5-Cyber, launched under the "Patch the Planet" initiative with Trail of Bits, has filed 64 pull requests and 51 issues across 19 open-source projects including cURL, Python, and Go in i…
An open-source maintainer rejected a three-line Go patch fixing a ProtonMail authentication bug in the hydroxide bridge, citing it as 'AI slop.' The author, who used a language model for codebase expl…
AI security firm AISLE discovered six new CVEs in curl, including the oldest latent bug in the project's history, and previously found all 12 zero-day vulnerabilities in OpenSSL's latest security rele…
Anthropic's Mythos AI security tool, touted as too dangerous to release, found only one low-severity vulnerability in the heavily audited curl codebase after a privileged deployment. The curl project …
Linux kernel maintainer Greg Kroah-Hartman says AI-generated security reports and patches have dramatically improved over the past month, shifting from low-quality 'AI slop' to real, useful bug report…
A developer explores when it is acceptable to forward AI-generated output to another human reader, while another engineer outlines three methods for AI coding at home without enterprise-level spending…
Curl will not accept vulnerability reports for the entire month of July 2026, a move maintainer Daniel Stenberg calls the "curl summer of bliss." The blackout follows a year of AI-generated fake secur…
OpenClaw, an open-source AI agent project, has significantly hardened its security after receiving 1,309 security advisories since January 10, with 87% of critical reports found to be invalid. The pro…
Mythos, despite being a top AI model, is not significantly ahead of competitors like GPT-5.5, and its hype is disproportionate to its actual improvement. The harness used to deploy AI models matters m…
A team of developers is rewriting the open-source checkpoint/restore tool CRIU in the Zig programming language, expecting to complete the project in months rather than the years a manual rewrite would…
A developer has created Neptune, a Direct3D virtualization extension for QEMU's virglrenderer that transports Direct3D APIs over Virtio GPU, enabling para-virtualized graphics for Windows applications…
Open-source developers are facing health risks due to a surge in AI-generated security bug reports, with curl lead developer Daniel Stenberg reporting a fivefold increase in daily reports that leaves …
Daniel Stenberg, the founder and lead developer of curl, reports that the rate of incoming security reports for the widely used networking library has surged to 4-5 times higher than in 2024, now aver…
Open-source maintainers are being overwhelmed by a flood of low-quality, AI-generated pull requests, a crisis that has already forced the Jazzband Python project ecosystem to shut down and is now thre…
AI-assisted security scanners, when pointed at the curl project's codebase, were able to automatically demote certain findings by reading and applying curl's own vulnerability disclosure policy. The p…