AI-generated code is flooding GitHub and degrading codebases, with research showing AI-written code has 1.7 times more critical issues and 45% ships with OWASP Top 10 vulnerabilities. Major projects l…
AI security firm AISLE discovered six new CVEs in curl, including the oldest latent bug in the project's history, and previously found all 12 zero-day vulnerabilities in OpenSSL's latest security rele…
Anthropic's Mythos AI security tool, touted as too dangerous to release, found only one low-severity vulnerability in the heavily audited curl codebase after a privileged deployment. The curl project …
GitHub has 630 million repositories, with nearly half of all new code written by AI, but developer trust in AI code dropped from 77% to 60%. Carnegie Mellon University found 6 million fake stars, and …
PageToMD, a new CLI tool, converts web pages into clean Markdown optimized for AI agents, featuring NFC-normalized UTF-8 output, YAML frontmatter with metadata, and optional JavaScript rendering for S…
The open-source curl project announced it will not process security vulnerabilities during July, drawing criticism from users who note billions of devices rely on the software daily. Critics argue tha…
A developer building autonomous AI workers for a freelance platform documented five costly automation mistakes, including a worker that ran 923 times with zero successful applications due to automatin…
Curl will not accept vulnerability reports for the entire month of July 2026, a move maintainer Daniel Stenberg calls the "curl summer of bliss." The blackout follows a year of AI-generated fake secur…
Check is a new command-line tool that lets users prefix any command with 'check' to deterministically verify whether it will run successfully before execution, returning an exit code 0 or 1. The tool …
Google's internal AI-based security scanning has discovered 17 bugs in Perfetto's trace processor over 10 weeks, a project that previously received little security attention. The bugs are high-quality…
A podcaster transcribed ten hours of old interviews using open-source AI tools WhisperX and pyannote.audio, running entirely on a local laptop with no cloud costs. The process demonstrates how far spe…
OpenClaw, an open-source AI agent project, has significantly hardened its security after receiving 1,309 security advisories since January 10, with 87% of critical reports found to be invalid. The pro…
Open-source developers are facing health risks due to a surge in AI-generated security bug reports, with curl lead developer Daniel Stenberg reporting a fivefold increase in daily reports that leaves …
Daniel Stenberg, the founder and lead developer of curl, reports that the rate of incoming security reports for the widely used networking library has surged to 4-5 times higher than in 2024, now aver…
The curl project's security team is facing unprecedented pressure from a flood of AI-assisted security reports, with incoming reports now 4-5 times higher than 2024 levels and averaging more than one …
Open-source maintainers are being overwhelmed by a flood of low-quality, AI-generated pull requests, a crisis that has already forced the Jazzband Python project ecosystem to shut down and is now thre…
AI-assisted security scanners, when pointed at the curl project's codebase, were able to automatically demote certain findings by reading and applying curl's own vulnerability disclosure policy. The p…
This article provides a bash script called `cloudsend.sh` that uses `curl` to upload files to shared folders on Nextcloud or Owncloud. The script accepts a file path and a folder link as arguments, an…