Simon H

Exclusive: Cathedral, a months-old cybersecurity start-up, recently told Anthropic that its researchers had penetrated sensitive internal data and messaging systems at the AI company, according to a draft report reviewed by The Post.

GOLDMAN: “.. we are starting to see clearer signs that the AI impact is spreading beyond the technology sector. .. the share of US firms that have adopted AI in regular business functions now shows a statistically significant negative correlation with employment growth ..”

I think the most revealing thing for me in this article is Ondřej Surý himself is like "yeah bro anyway the current model of open source is unsustainable and it is exploitive of the people who work on it" and. Whew buddy I can only imagine.

70 percent of the internet was vulnerable yesterday to very bad security flaws inside a coding language. Turns out, *one volunteer* is mostly responsible for maintaining that code & helping push updates. Yesterday Ondřej Surý saved the internet. So I called him up www.theatlantic.com/technology/2...

I’m reminded of this article from a few weeks ago about the people holding up the Internet sheets.works/data-viz/hol...

Espressif Systems' $59 ESP-Mosaico lets AI agents write, deploy, test, and refine code on real hardware to turn your ideas into working prototypes.

Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack

In addition to the wage index, you can see the volume of separations (below) or separations per capita. You can see all of these by education. Separations are rising quickly only among those with more education. Values can be indexed to the 2016 level. Also by age, metro status, race, sector...

"The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated." www.ncsc.gov.uk/news/critica...

In cybersecurity news: this is, uh, not good. Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’ (eMudhra has issued 60 million certs with these 'private' keys...) www.theregister.com/security/202... via @theregister.com

Generative AI is reshaping open source development, and the trade-offs are starting to show. LF Research surveyed 234 OSS contributors and maintainers: 1 in 4 incoming PRs are now "AI slop," and only 1 in 3 projects have a formal AI policy. Read the full report to learn more.

Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.

Good cyber hygiene is the foundation of defence💡 Our new guidance provides a supportive framework for senior decision makers to build strong cyber security foundations and reduce the likelihood and impact of highly disruptive cyber attacks. Take action today⬇️ www.ncsc.gov.uk/collection/d...

My latest @newscientist.com cartoon

This is very impressive but making code available isn't the same as it being reused. What would be really interesting, if the data is available, is how often the repos are cloned by people who aren't maintainers.

In the proudest tradition of utterly failing to relax on holiday, I've updated my "Open Govtech Index": all the government open source repos I could find, classified and tracked, so you can see what government is building (and hopefully reuse some of it!) www.govtechindex.cloud

NEW: Researchers at @citizenlab.ca found ~45 phones belonging to @aljazeera.com infected with zero-click spyware that was distributed via online ads—a “nightmare scenario” that is extremely difficult to defend against. @mattburgess1.bsky.social & @lhn.bsky.social report www.wired.com/story/nightm...

Here's a short post with some of my thoughts about digital sovereignty, maintainer burnout, and evolving metrics needs that were common themes throughout the Open Source Summit in Prague last week. I hope you enjoy it! fastwonderblog.com/2026/10/12/o...

I love seeing this photo from @feynudibranch.bsky.social’s FOSDEM talk a couple of years ago! I’ve seen it in several other presentations, including today’s presentation from @shanecurcuru.bsky.social’s #communityOverCode talk in Glasgow. Also, hi Kara 💖💖

Around 70% of open source maintainers work alone or in small teams, and most are unpaid. @mirandaheath.website, Director and psychologist at the @stewardshiplab.org on the four drivers of burnout and what AI does to each. @viteconf.org 2026, 15 oct (TODAY) 2pm UTC. Free and online. viteconf.org

How does the UK's "AI sovereignty" debate connect to public expectations? At @adalovelaceinst.bsky.social we’re kicking off an exciting new project that will use polling and conjoint analysis to explore public views on trade-offs — and we're looking for a fieldwork partner. Tender below 👇

most economically-viable AI company

The amount of new pull requests per day is now too high to manage it with the amount of care and thought that we believe Vitest deserves.

Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers.

Separately as a lawyer I'll say the other thing I'm seeing is possible unprecedented scope of liability for the AI companies whose products are being foreseeably used to destroy the value of whole corporations This may have been one reason they tried to pump the brakes recently

A friend just wrote me about what is happening right now with AI decompiling games and applications (e.g., Adobe Photoshop) and it has really shaken me because the implications for the free market are staggering Basically closed source software is over forever and it happened overnight

AWS launches open-source AI agent sandbox to prevent YOLO mode disasters www.theregister.com/ai-and-ml/20...

Yes, the critics are correct, the open source rebuilds that were made in days are buggy and a bit broken at present. I'm sure this criticism will age about as well as "the people have six fingers". If you can't see what's happening here, your head is in the sand.

The new OSS Scanner service offers vulnerability reports from Anthropic’s “strongest models,” including Mythos. www.theverge.com/ai-artificia...

AI models used in bank cyber attacks, warns South Korea’s president ft.trib.al/4NjT1TW

South ⁠Korean officials are investigating whether A.I. agents were involved in recent hacking incidents against banks after President Lee Jae Myung said on Tuesday that “signs have emerged” that A.I. models had been used in some of the cyberattacks in the country.

🔴 Russia’s jet-powered Geran-4 attack drones rely almost entirely on foreign-made electronics. 🔗 united24media.com/investigatio...

Local, open source models for the win!

Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports.

Google halts open-source bug bounty program amid AI spam surge

Don't miss today's Metacurity for the most critical infosec developments you might have missed over the weekend, including --Detained ShinyHunters suspect is helping the FBI track the group, 1/5 www.metacurity.com/detained-shi...

Poland’s Defence Ministry is drafting a law to prepare the state for a “pre-war” or full defence-readiness phase before martial law is formally declared, Rzeczpospolita reports.

The law would allow earlier deployment of Polish and allied troops, align defence plans with NATO systems and prepare infrastructure for heightened readiness, designed to address hybrid threats, cyberattacks and disinformation.

The proposed social media ban, the EU KIDS Act, is perhaps the most chaotic law I have ever read! New paper: Are EU Kidding Me? Notes from a Poorly Drafted Social Media Ban. files.michae.lv/papers/veale_areEUkiddingme.pdf In the spirit of the proposal I have stayed offline and read no takes.

Most TV is just this now.

These data centers are financial poison even if you bought them cheap. The returns are awful, the debt is toxic, the ongoing opex is nasty because of the cost of cooling and the power demands, and 30% gross margins requires near-perfect conditions and constant revenue for 5+ years.

Brilliant!

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited. Read more⬇️ www.ncsc.gov.uk/news/exploit...

Cyberattack hits Welsh police force, may have affected staff data #cybersecurity #hacking #news #infosec #security #technology #privacy therecord.media/wale...

My latest @newscientist.com cartoon. many more here: www.newscientist.com/author/tom-gauld/

Scientists have found a ‘fire amoeba’ in hot springs which survived at 70C by forming a protective outer layer. It has set a new record of the temperature at which complex life forms can thrive www.ft.com/content/83d1...

How not to feed sheep with Chris, Lorna & Tania