Manifest, the company behind the Manifest LLM gateway, deprecated its LLM router in June and shut it down on September 1st, citing mixed results from 7,000 cloud users. The company argues that prompt …
The GCC Steering Committee has adopted a policy banning legally significant AI-generated contributions, defined as roughly 15 lines of code or text, while allowing smaller AI-assisted edits if clearly…
Researchers from UC Berkeley and Google released ExploitGym v1.0, a benchmark with 869 real-world vulnerability instances across userspace programs, Google's V8 engine, and the Linux kernel, designed …
A llama.cpp maintainer argues that AI coding is a permanent paradigm shift and a 'human amplifier' rather than a replacement, urging developers to understand its strengths and weaknesses, guide AI ste…
A security researcher disclosed a use-after-free (UAF) vulnerability in the Linux kernel's net/sched subsystem, found with AI assistance, that allows local privilege escalation (LPE). The bug stems fr…
A developer built rai-lint, a linter that enforces AI attribution footers in Git commits, and rai-commit-badge, a GitHub Action that reads those footers to generate a Shields.io badge showing the perc…
Wiz Research has built Atlas, an autonomous AI system for vulnerability research that ranks #1 on the CyberGym benchmark with a 90.9% success rate and has uncovered more than 200 previously unknown vu…
Linus Torvalds told Linux kernel mailing list participants on July 15 that Linux is not an anti-AI project and that those who object to AI-assisted work can fork the kernel or walk away, according to …
The Debian project opened a formal General Resolution on July 24, 2026, with four seconded proposals governing LLM-assisted contributions, ranging from an outright ban to permissive disclosure. The wi…
A new benchmark called ExploitGym finds that frontier AI agents can autonomously turn real-world security vulnerabilities into working exploits, achieving unauthorized code execution on 869 tasks span…
On July 22, 2026, high-school student Ruikai Peng (@ruikai) announced Rolling in the Diffs, an LLM-based tool he claims has discovered over 60 vulnerabilities in open-source projects including the Lin…
Linus Torvalds has firmly endorsed the use of AI tools in Linux kernel development, rejecting ethical objections and grounding the discussion in technical merits. Over 1,200 kernel commits since Septe…
Anthropic's Claude Code permission system is vulnerable to prompt injection because its flat allowlist cannot track the provenance of tool calls, a concept known as 'taint' that has existed since Perl…
Linus Torvalds defended the use of AI tools in Linux kernel development, responding to a debate about integrating the agentic LLM code review tool Sashiko into the kernel's Patchwork tracking system. …
Nebula Security's AI platform VEGA uncovered GhostLock, a use-after-free vulnerability in the Linux kernel's futex implementation that has existed since version 2.6.39 (2011). The bug allows any unpri…
Linux creator Linus Torvalds firmly rejected anti-AI sentiment on the Linux kernel mailing list, stating that the kernel project is not anti-AI and that AI is a useful tool. Torvalds said he will "abs…
Farid Zakaria developed a tool called anubis-fetch that easily bypasses Anubis, a proof-of-work proxy designed to block AI scrapers from accessing Linux kernel mailing list threads. The author argues …
The Zig project has banned all LLM-generated contributions, calling them "invariably garbage," and Godot and the Linux kernel have followed with similar policies requiring disclosure of AI tool usage.…
Linux kernel developers are debating whether to simplify or eliminate the requirement for AI/LLM agent attribution in patches, with prominent developer Christian Brauner arguing the current policy cre…
Linux kernel maintainer Greg Kroah-Hartman says AI-generated security reports and patches have dramatically improved over the past month, shifting from low-quality 'AI slop' to real, useful bug report…