OpenSSH 10.5, released August 11 just five weeks after 10.4, breaks the project's traditional release cadence in response to a flood of security reports from AI models, with maintainers announcing mor…
OpenSSH 10.5, released on August 11, just five weeks after 10.4, includes three security fixes and a change in release cadence due to a flood of security reports from AI models or made with AI assista…
The curl project shut down its bug bounty in January 2026 after AI-generated reports overwhelmed triage, with the share of valid reports falling from above 15% to below 5% in 2025, and in the first th…
A developer at Workstyle encountered stalled downloads of large model files from Hugging Face using huggingface_hub, and devised a workaround using curl's stagnation detection and automatic resumption…
A developer describes evaluating Apidog CLI as a command-line alternative to Postman for testing AI APIs, citing benefits for automation and CI/CD workflows. The developer notes that reusing API test …
Trail of Bits engineers using Codex's /goal feature in the Patch the Planet initiative found that letting the model draft its own goal prompts, then red-teaming those prompts, yields tighter bug-hunti…
Open-source projects are formalizing rejection of AI-generated contributions at an accelerating pace, with five independent actions in seven days. Codeberg banned AI-generated code in a 358-144 member…
GitHub cut its public bug bounty payouts by at least 50% across all severity levels effective July 27, 2026, and moved top rewards to an invite-only VIP tier, citing a flood of AI-generated spam repor…
The White House launched the Gold Eagle initiative on July 14, 2026, as a central clearinghouse to triage and coordinate patches for AI-discovered vulnerabilities across federal systems, critical infr…
Vercel and Lovable now offer zero-config auto-deployment for AI-generated apps, eliminating the manual build configuration that previously made such apps feel like toys. OpenAI's GPT-5.6 introduces th…
A developer built an LLM-based filter for financial news that prioritizes a low false-positive rate over recall, accepting silence on borderline cases to avoid forwarding wrong information. The filter…
Instagui, a new open-source tool, lets users turn any command-line interface into a web GUI with a single command by parsing the tool's --help text using AI. The tool requires no code changes to the C…
Godot Engine formally banned AI-generated code from its open-source project on June 30, citing maintainer burnout and the inability of AI-reliant contributors to fix their own code. The policy prohibi…
Curl maintainer Daniel Stenberg, who has triaged over 1,000 vulnerability reports, published a field guide on how to report vulnerabilities effectively. The guide emphasizes making reports easy for ma…
A developer created a tool called Forever Components Inspo that fetches a manifest of UI components from an infinite canvas site, ranks them semantically against user prompts, and retrieves their sour…
In the age of AI, software quality hinges on taste, not tooling or budget, argues a developer. Taste, defined as understanding made small, separates elegant, user-respecting software from slop produce…
An open-source maintainer rejected a three-line Go patch fixing a ProtonMail authentication bug in the hydroxide bridge, citing it as 'AI slop.' The author, who used a language model for codebase expl…
A new approach to cybersecurity evaluations proposes using language models as constant red-team oracles to empirically compare the attack surfaces of different software implementations, such as OpenSS…
The Linux Foundation and 19 industry partners launched Akrites, an open source security coalition, on June 25, 2026, to address the surge in AI-discovered vulnerabilities that overwhelm maintainers. T…
The National Academies of Sciences, Engineering, and Medicine published a report on AI for cybersecurity that cites Anthropic's Mythos model as capable of finding 83.1% of vulnerabilities in CyberGym,…