Malware named Shai-Hulud has been discovered embedded in malicious versions of the Red Hat npm package, with the compromised packages downloaded approximately 80,000 times per week. The supply chain a…
Red Hat has released a new integration enabling developers to run Anthropic's Claude Code and OpenCode AI coding assistants locally using OpenShell, Podman, and Fedora or RHEL systems with Vertex AI b…
On June 1, 2026, an attacker exploited npm's trusted publishing mechanism to compromise 32 @redhat-cloud-services packages across 96 versions, injecting malicious preinstall hooks that execute a Bun-b…
IBM and Red Hat announced a $5 billion commitment on May 28, 2026, to launch Project Lightwell, a security clearinghouse for enterprise open source software backed by 20,000 engineers and AI tooling. …
The QEMU open-source emulator project is considering relaxing its ban on AI-generated code contributions, according to a proposal from a Red Hat engineer who argues the risk-benefit balance has shifte…
IBM and Red Hat announced Project Lightwell, a $5 billion initiative deploying 20,000 engineers and AI tools to systematically find and fix vulnerabilities in open-source software at industrial scale.…
IBM and Red Hat announced Project Lightwell, a $5 billion initiative to create an AI-powered "enterprise clearinghouse" for discovering and patching vulnerabilities in open-source software. The projec…
IBM and Red Hat launched Project Lightwell, a $5 billion initiative deploying 20,000 engineers and AI to identify and fix open source software vulnerabilities at scale. The program extends Red Hat’s e…
IBM and Red Hat announced Project Lightwell, a $5 billion initiative deploying more than 20,000 engineers and an AI-driven clearinghouse to identify, validate, and remediate vulnerabilities in open so…
IBM and Red Hat announced Project Lightwell, a $5 billion initiative combining new AI capabilities and a global team of over 20,000 engineers to secure open source software for enterprises. The projec…
QEMU, the processor emulator critical to the Linux virtualization stack, is revising its policy to allow some AI and LLM-generated contributions after previously banning them outright. Red Hat virtual…
The third annual VulnCon 2026, hosted by FIRST and the CVE Program, drew 350 in-person and 130 virtual attendees from 25 countries to Scottsdale, Arizona, for a week focused on vulnerability managemen…
Arm and Red Hat have launched a fully integrated, production-ready AI stack combining the Arm AGI CPU with Red Hat Enterprise Linux and OpenShift to power agentic AI workloads in data centers. The col…
The article argues that open-source software is being threatened by a "death by a thousand cuts" through new regulations. It cites the European Union's Cyber Resilience Act and California's age verifi…
The article discusses the history and current state of MySQL, noting its decline in popularity after Oracle's acquisition but arguing it may be due for a renaissance. Despite PostgreSQL becoming the d…