Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

cloudflare

We're open-sourcing our privacy proxy CLI

Jul 27, 2026 By Better Internet In Cloudflare
Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across many draft RFCs. We've taken what we've learned operating protocols like Oblivious HTTP at the scale of millions of requests per second, and wrapped it up in a nice, clean CLI tool — that we are open-sourcing today. We call it our privacy-client, or pvcli.
Read Post
CrowdStrike

CrowdStrike Joins the Open Secure AI Alliance to Advance AI Safety and Security

Jul 27, 2026 By Bartley Richardson In CrowdStrike
AI is changing the speed and scale of cyber defense, and the speed and scale of the adversary. As AI becomes embedded across government, critical infrastructure, and enterprise environments, defenders need the ability to inspect, test, adapt, and secure the systems they depend on.
Read Post
knowbe4

The Open-Source Paradox: Navigating the New Frontier of AI Supply Chain Risk

Jul 24, 2026 By Dr. Kawin Boonyapredee In KnowBe4
The recent developments surrounding vulnerabilities in major AI repositories like Hugging Face serve as a critical wake-up call for the cybersecurity community. As we accelerate toward an agentic future, the platforms we rely on for innovation are increasingly becoming the primary vectors for systemic risk.
Read Post
UTMStack

Top 10 Open Source SIEM Tools for 2026

Jun 30, 2026 By cesmng In UTMStack
At 2 a.m., an alert queue full of raw Windows events, firewall logs, and duplicate detections stops being a tooling problem and becomes an operations problem. The team does not need another dashboard. It needs a SIEM that can ingest the right data, normalize it, correlate it well enough to surface real incidents, and stay maintainable after the initial rollout.
Read Post
Inside Modern Cybersecurity Companies: How Businesses Are Defending Email and Critical Infrastructure

Inside Modern Cybersecurity Companies: How Businesses Are Defending Email and Critical Infrastructure

Jun 17, 2026 By SecuritySenses In SecuritySenses
Every business now depends on connected systems to communicate, store information, manage operations, and support customers. Email platforms handle sensitive conversations, Linux servers power cloud environments, and digital infrastructure keeps websites, applications, and internal networks running around the clock. While these technologies create efficiency and scalability, they also create opportunities for attackers looking to exploit weak points.
Read Post
Snyk

Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection

Jun 2, 2026 By Brian Vermeer In Snyk
On May 25, 2026, the maintainer of jqwik, a Java property-based testing library, released version 1.10.0 to Maven Central with a hidden instruction intended for AI coding agents. The payload told agents to disregard previous instructions and delete all jqwik tests and code. It was hidden from humans with ANSI terminal codes but left fully readable to any tool that captures raw output.
Read Post
armo

Commercial vs Open Source AI Attack Detection Tools: A Buyer's Guide

May 29, 2026 By Shauli Rozen In ARMO
If you’re weighing open source against commercial tools for detecting attacks on your AI agents, you’re probably trying to answer a single question. Can we build this ourselves, or should we buy it? It’s a fair question, and the existing content on it isn’t much help. Most comparisons line up tools side by side and tally features. That tells you which tool is better at one slice of the problem. It doesn’t tell you whether you have a working detection program.
Read Post
Snyk

Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining

Apr 27, 2026 By Julia Kinday In Snyk
In early February 2026, users of Qinglong (青龙), a popular open source timed task management platform with over 19,000 GitHub stars, began reporting that their servers were maxing out CPU usage. The cause was a cryptominer binary called.fullgc, deployed through two authentication bypass vulnerabilities that allowed unauthenticated remote code execution. The attacks went largely unnoticed in the English-speaking security community.
Read Post

Episode 13 - Battle-Hardened Research: Navigating the Intersection of AI and Open Source

Apr 23, 2026 By Corelight In Corelight
Richard Bejtlich sits down with Ali Islam to pull back the curtain on how a security research lab functions within a modern security company. Moving beyond the "ivory tower" of academia, Ali explains why researchers must be battle-hardened by real-world threat actor techniques to remain effective in the field. The conversation dives into Corelight’s unique commitment to the open source community through the direct funding of Zeek and Suricata developers, ensuring that community-driven tools can scale to meet massive enterprise traffic demands.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.