Spotify generates the vast bulk of its income from ads and subscriptions, but for the past few years the music-streaming giant has also been quietly building out a developer tooling business. Backstage, a project it open-sourced in 2020, has been adopted by more than 2 million developers across 3,400 organizations, including Airbnb, LinkedIn, Twilio, and…
Category: open source
AI, AI2, Global Security News, open source
Ai2’s new small AI model outperforms similarly-sized models from Google, Meta
‘Tis the week for small AI models, it seems. On Thursday, Ai2, the nonprofit AI research institute, released Olmo 2 1B, a 1-billion-parameter model that Ai2 claims beats similarly-sized models from Google, Meta, and Alibaba on several benchmarks. Parameters, sometimes referred to as weights, are the internal components of a model that guide its behavior.…
Application Security, DevOps, Global Security News, open source, Security Bloggers Network
Kubernetes Resource Optimization & Best Practices with Goldilocks
Kubernetes is now the industry standard for orchestrating containerized workloads, but efficient resource management remains a challenge for many organizations. It’s important to get right though! Over-provisioning leads to wasted cloud spend, while under-provisioning risks instability, throttling, or outages. When we first open-sourced Goldilocks in October 2019, our goal was to offer a dashboard utility…
AI, Climate, Global Security News, open source
This tool estimates how much electricity your chatbot messages consume
Ever wonder how much electricity you’re using when you prompt, or thank, an AI model? Hugging Face engineer Julien Delavande did, so he built a tool to help arrive at the answer. AI models consume energy each time they’re run. They’re run on GPUs and specialized chips that need a lot of power to carry…
AI, Global Security News, open source, openai
OpenAI debuts Codex CLI, an open source coding tool for terminals
In a bid to inject AI into more of the programming process, OpenAI is launching Codex CLI, a coding “agent” designed to run locally from terminal software. Announced on Wednesday alongside OpenAI’s newest AI models, o3 and o4-mini, Codex CLI links OpenAI’s models with local code and computing tasks, OpenAI says. Via Codex CLI, OpenAI’s…
Application Security, CVE, Cybersecurity, DevOps, Global Security News, open source, Security Bloggers Network, Thought Leaders, vulnerabilities
What’s happening with MITRE and the CVE program uncertainty
Yesterday’s headlines have sent ripples through the cybersecurity and software supply chain communities: MITRE announced that U.S. government funding for the CVE (Common Vulnerabilities and Exposures) database was set to expire today. Overnight, the CVE Foundation emerged with a plan to maintain the program before the Critical Infrastructure and Security Agency (CISA) announced it has…
Emerging Tech, Enterprise, Global Security News, Jim Zemlin, open source, the linux foundation
Jim Zemlin on taking a ‘portfolio approach’ to Linux Foundation projects
The Linux Foundation has become something of a misnomer through the years. It has extended far beyond its roots as the steward of the Linux kernel, emerging as a sprawling umbrella outfit for a thousand open source projects spanning cloud infrastructure, security, digital wallets, enterprise search, fintech, maps, and more. Last month, the OpenInfra Foundation…
AI, Artificial Intelligence, ChatGPT, deepseek, deepseek-r1, Developer, developers, Global Security News, International, large language models, Llama, Meta, News, open source, openai, Security, Software
Developers Wanted: OpenAI Seeks Feedback About Open Model That Will Be Revealed ‘In the Coming Months’
Find out how to provide OpenAI with your input about its upcoming open language model, which Sam Altman stated will be a “reasoning” model like OpenAI o1.
genetic testing, Global Security News, Government, open source, privacy, Security, U.S. government
Genetic sharing site openSNP to shut down, citing concerns of data privacy and ‘rise in authoritarian governments’
The open source repository of genetic data will delete its banks of data on April 30, its co-founder confirms.
Apps, ente, Global Security News, Google Photos, open source, Photo backup, privacy
Ente wants to take on Google Photos with its privacy-first photo storage service
Despite Google’s intentions for its default image viewing and editing app for Android, the Photos app has, over the years, become one of the most popular photo backup services around. In fact, it was one of the most attractive offerings for years until it stopped offering unlimited storage in 2020. That change in the tech…
Enterprise, Exclusive, Global Security News, microservices, open source, Startups, Temporal, tiger global
Temporal lands $146 million at a flat valuation, eyes agentic AI expansion
Seattle-based Temporal has made its name over the last several years in the world of microservices — specifically providing a platform to orchestrate the messy business of building and operating integrations and updates across disparate services and apps in the cloud. But the AI boom has come at the company fast. Now, Temporal has raised…
AI, AI bot, Global Security News, open source, TC, website crawler
Open source devs are fighting AI crawlers with cleverness and vengeance
AI web crawling bots are the cockroaches of the internet, many developers believe. FOSS devs are fighting back in ingenuous, humorous ways.
eBay, Enterprise, Fundraising, Global Security News, GraphQL, open source, Startups, WunderGraph
Ebay backs WunderGraph to build an open-source GraphQL federation
A fledgling open-source startup that’s setting out to tackle API sprawl in the GraphQL ecosystem has secured the backing of e-commerce giant eBay. WunderGraph, as the company is called, today said it has raised $7.5 million in a Series A round of funding to “scale its open source GraphQL federation.” Investors include eBay’s VC arm…
Cloud Security, Cybersecurity, Exploits, Global Security News, Kubernetes, Nginx, open source, open source software, Research, Threats
String of defects in popular Kubernetes component puts 40% of cloud environments at risk
More than 40% of cloud environments are at risk of an account takeover due to a series of five recently discovered vulnerabilities — one regarded critical — in the Ingress Ngnix Controller for Kubernetes, according to security research published this week. Upon discovering the string of vulnerabilities in one of most widely used ingress controllers…
CVE, Cybersecurity, Exploits, Global Security News, Next.js, open source, open source software, Research, vulnerability, vulnerability disclosure
Researchers raise alarm about critical Next.js vulnerability
Researchers warn that attackers could exploit a recently discovered critical vulnerability in the open-source JavaScript framework Next.js to bypass authorization in middleware and gain access to targeted systems. Vercel, the San Francisco-based company that created and maintains Next.js, released a patch for CVE-2025-29927 in Next.js 15.2.3 on March 18 and published a security advisory on…
Europe, Global Security News, open source, ROSS Index, Runa Capital, Startups, TC
The 20 hottest open source startups of 2024
A new report showcases the 20 top-trending open source startups around the world, more than half of which are closely aligned with AI. The report is the handiwork of European venture capital firm Runa Capital, which has operated the Runa Open Source Startup (ROSS) Index since 2020. The Index serves quarterly updates on the fastest-growing…
apache, apache tomcat, cyber security, Cybersecurity, Global Security News, News, open source, remote code execution, Security, servlets, vulnerabilities, web servers
Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters: Are You at Risk?
By simply sending HTTP requests, attackers can trigger the deserialisation of malicious data in Tomcat’s session storage and gain control.
agents, AI, AI agents, dapr, Enterprise, Global IT News, Global Security News, open source, TC
Dapr’s microservices runtime now supports AI agents
Back in 2019, Microsoft open-sourced Dapr, a new runtime for making building distributed microservice-based applications easier. At the time, nobody was talking about AI agents yet, but as it turns out, Dapr had some of the fundamental building blocks for supporting AI agents built-in from the outset. That’s because one of Dapr’s core features is…
AI, Artificial Intelligence, Enterprise, Exclusive, Global IT News, Global Security News, Khosla Ventures, Onyx, open source, Startups
Why Onyx thinks its open source solution will win enterprise search
Enterprises have troves of internal data and information that employees need to complete their tasks or answer questions for potential customers. But that doesn’t mean the right information is easy to find. Onyx wants to solve that problem through its internal enterprise search tool. There are other big names in the category, like Glean —…
Global IT News, Global Security News, open source, Open Web, project liberty, Social, Solid, Startups, SXSW
Open web initiatives Project Liberty and Solid could be teaming up
Two initiatives to create a more open web, where users are in control of their own digital identities and data, may be coming together. At SXSW 2025, entrepreneur Frank McCourt, whose Project Liberty is developing open internet infrastructure (and is throwing its hat in the ring as a potential buyer for TikTok), announced that his…
Apache Cassandra, Chainguard, Cybersecurity, encryption, FIPS, Global Security News, Java, open source, secure by design, Technology, Uncategorized
Chainguard’s FIPS-compliant Cassandra addresses security demand of federal and regulated markets
Open-source software security firm Chainguard announced Wednesday that it is now building FIPS-validated images for Apache Cassandra, achieving what it describes as a first-of-its-kind accomplishment in the open-source community. The project enables organizations in regulated industries — including government, health care, and finance — to deploy Cassandra with cryptographic libraries compliant with the National Institute…
Automattic, Enterprise, Global IT News, Global Security News, open source, wordpress
Automattic CEO Matt Mullenweg talks succession — ‘I don’t want to pass it to a committee’
Calls for WordPress co-founder and Automattic CEO Matt Mullenweg to step down from his leadership role have increased in recent months amid his controversial fight and legal battle with hosting company WP Engine. Mullenweg not only intends to stay, he’s also thinking about how he plans to manage succession planning. He doesn’t want to pass…
Application Security, Best Practices, data protection, Data Security, DevOps, Global Security News, open source, Security Bloggers Network, small business, Software
When Your SaaS Vendor Goes Dark: A Guide to Protecting Your Business
When a SaaS vendor unexpectedly shuts down, your business faces significant risks. This comprehensive guide provides actionable strategies to recover your data, find alternative solutions, and implement preventative measures to ensure business continuity. The post When Your SaaS Vendor Goes Dark: A Guide to Protecting Your Business appeared first on Security Boulevard.
Apps, Cybersecurity, encrypted chat apps, evergreens, Global IT News, Global Security News, open source, privacy, productivity, Security
These alternatives to popular apps can help reclaim your online life from billionaires and surveillance
Not every app or service wants to monetize your personal data. Here are some of our favorite alternatives to popular apps. © 2024 TechCrunch. All rights reserved. For personal use only.
ai coding assistant, Continue, Fundraising, Global IT News, Global Security News, open source, Startups, Y Combinator
Continue wants to help developers create and share custom AI coding assistants
A new startup wants to help developers create customized, contextual coding assistants that can connect with any model and integrate seamlessly with their development environments. Founded in June 2023 by CEO Ty Dunn and CTO Nate Sesti (pictured above), Y Combinator alum Continue has already garnered some 23,000 stars on GitHub and 11,000 Discord community…
Cloud, Cloud Security, Cybersecurity, cybersecurity risks, digital signatures, Global Security News, Google, google cloud, google cloud key management service, Innovation, NIST, open source, quantum computing, Security
Google Announces Quantum-Safe Digital Signatures in Cloud KMS, Takes “Post-Quantum Computing Risks Seriously”
This news about Google Cloud Key Management Service is part of the tech giant’s post-quantum computing strategy.
AI, deepseek, Event, Global IT News, Global Security News, open source
DeepSeek to open-source parts of online services code
Chinese AI lab DeepSeek plans to open-source portions of its online services’ code as part of an “open source week” event next week. DeepSeek will open-source five code repositories that have been “documented, deployed and battle-tested in production,” the company said in a post on X on Thursday. Code repositories are storage locations for software…
Chainguard, Emerging Tech, Global Security News, open source, secure by design, software security, Uncategorized
Projecting the next decade of software supply chain security
With the rapid pace of innovation accelerating under a new administration, discussions over whether software security will be sidelined in favor of speed are heating up. However, security leaders have long been saying that security protocols shouldn’t slow down development plans — and they don’t when done correctly. This perception must be adopted more widely…
AI, Android, Enterprise, Global IT News, Global Security News, Llama, open source, OpenUK, State of Open Con
Why the ‘spirit’ of open source means much more than a license
Arguments about what is and isn’t “open source” are often resolved by deferring to the Open Source Initiative (OSI): If a piece of software is available under a license rubber stamped as “open source” by the OSI’s formal “definition,” then that software is open source. But waters muddy when you get into the nuts and…
AI, Apps, deep research, Global IT News, Global Security News, Hugging Face, Open AI, open deep research, open source, openai, openai deep research
Hugging Face researchers aim to build an ‘open’ version of OpenAI’s deep research tool
A group of developers at AI dev platform Hugging Face, including Thomas Wolf, the company’s co-founder and chief scientist, say they’ve built an “open” version of OpenAI’s deep research tool. Deep research, which OpenAI unveiled during an event Sunday, crawls the web to compile research reports on any subject. While impressive, deep research is currently…
Amazon Web Services (AWS), cloud computing, Cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Exploits, Global Security News, open source, Research, S3 bucket, SSL, VPN gateway, watchTowr Labs
Here’s all the ways an abandoned cloud instance can cause security issues
There is a line of thought among the public that “the internet is forever.” A security company published research Tuesday that showed why “forever” can be a security nightmare. Over the course of four months, cybersecurity researchers at watchTowr monitored and ultimately took control of what they referred to as “abandoned” digital infrastructure, focusing on…
AI, AI Risks, Application Security, china, cyber security, cyber threat, Cyberlaw, Cybersecurity, Data Privacy, Data Security, deepseek, DeepSeek AI, DevOps, Digital Drivers Licenses, digital id, Digital Privacy, drivers license, Episodes, Global Security News, Government, Information Security, infosec, law enforcement, open source, Podcast, Podcasts, police, privacy, Security, Security Bloggers Network, Technology, Technology Policy, Weekly Edition
Privacy Concerns with Digital Driver’s Licenses, The Rise of DeepSeek AI
In this episode, we explore the rollout of digital driver’s licenses in states like Illinois and the potential privacy issues that come with them. Can digital IDs truly enhance convenience without compromising your privacy? We also discuss the new Chinese AI model, DeepSeek, which is affecting U.S. tech companies’ stock prices. Join us as we…
AI, bias, data set, generative ai, Global IT News, Global Security News, Hugging Face, mlcommons, open source, public domain, speech
MLCommons and Hugging Face team up to release massive speech data set for AI research
MLCommons, a nonprofit AI safety working group, has teamed up with AI dev platform Hugging Face to release one of the world’s largest collections of public domain voice recordings for AI research. The data set, called Unsupervised People’s Speech, contains more than a million hours of audio spanning at least 89 different languages. MLCommons says…
AI, ai models, Channel Insider, deepseek, Emerging Tech, Global Security News, IT, IT Channel, Katie Bavoso, Managed Services, MSP, Network Solutions Provider USA inc., open source, openai, Partners, Phillip Walker, VAR, Video
Video: How DeepSeek And Emerging AI Models Could Impact The IT Channel
It’s been a wile week in the world of AI! DeepSeek went from breaking the mold with its new AI models that the Chinese startup reported were cheaper, faster, and less resource intensive to make by using fewer, sub standard GPU chips. Now, OpenAI accuses the emerging AI leader of copying its models. What does…
Artificial Intelligence, Big Data, clickhouse, database leakage, deepseek, DeepSeek v3, deepseek-r1, generative ai, Global Security News, International, open source, openai o1, Security, Security Research, Software, wiz research
DeepSeek Locked Down Public Database Access That Exposed Chat History
Research Firm Wiz Research began investigating DeepSeek soon after its generative AI took the tech world by storm.
AI, AI2, DeepSeek v3, generative ai, Global IT News, Global Security News, open source, open source ai, Tulu3-405B
Ai2 says its new AI model beats one of DeepSeek’s best
Move over, DeepSeek. Seattle-based nonprofit AI lab Ai2 has released a benchmark-beating model called Tulu3-405B. © 2024 TechCrunch. All rights reserved. For personal use only.
Apple, Artificial Intelligence, Big Data, ChatGPT, deepseek, DeepSeek v3, deepseek-r1, Developer, generative ai, Global Security News, Innovation, International, Microsoft, nvidia, open source, openai, reasoning models, Security
DeepSeek Chatbot Beats OpenAI on App Store Leaderboard
The Chinese firm said training the model cost just $5.6 million. Alibaba Cloud followed with a new generative AI model, while Microsoft alleges DeepSeek ‘distilled’ OpenAI’s work.
AI, deepseek, deepseek-r1, generative ai, Global IT News, Global Security News, Hugging Face, open source, open-r1, r1, reasoning model
Hugging Face researchers are trying to build a more open version of DeepSeek’s AI ‘reasoning’ model
Barely a week after DeepSeek released its R1 “reasoning” AI model — which sent markets into a tizzy — researchers at Hugging Face are trying to replicate the model from scratch in what they’re calling a pursuit of “open knowledge.” Hugging Face head of research Leandro von Werra and several company engineers have launched Open-R1, a…
AI, Anthropic, Artificial Intelligence, Claude, Global IT News, Global Security News, open source, TC
AI startup DeepSeek pauses signups amid cyber incident
DeepSeek, the Chinese AI startup that made waves in the AI world last week when it released its open-source R1 model, is pausing new user signups. The company has temporarily paused new user registrations this morning, according to CNBC reporting, due to a cyberattack. Existing users can still access their accounts with no issue. TechCrunch…
Aikido Security, Amplify, Arnica, Cybersecurity, endor labs, Global Security News, Jit, Kodem, Legit Security, Mobb, open source, OpenGrep, Orca Security, Research, security testing, Semgrep, Static Analysis, Technology
Open-source security spat leads companies to join forces for new tool
A conflux of open-source developers and application security companies has been embroiled in a complex debate after a recent change in the licensing policy of a widely used static code analysis tool, resulting in a faction of organizations creating a new, open-source rival. The issue started with a recent change in the licensing policy of…
Apps, federated apps, fediverse, Global IT News, Global Security News, Instagram, loops, Meta, open social, open social web, open source, pixelfed, Social, social media, Sup, TikTok
Open source alternatives to Instagram, TikTok, and WhatsApp raise funds on Kickstarter
The developer behind Pixelfed, Loops, and Sup, open source alternatives to Instagram, TikTok, and WhatsApp, respectively, is now raising funds on Kickstarter to fuel the apps’ further development. The trio is part of the growing open social web, also known as the fediverse, powered by the same ActivityPub protocol used by X alternative Mastodon. The…
Global IT News, Global Security News, Link shortner, open source, oss capital, Startups, Vercel
Dub.co is an open-source URL shortener and link attribution engine packed into one
In the last few weeks, PayPal-owned Honey, which claims to find you the best coupon codes for a deal, has been at the center of controversy. Allegedly, the tool sneakily earned affiliate money by changing attributes of product links creators posted on their videos. At the center of it, the problem was how affiliate links…
apache 2.0, Apps, Enterprise, evergreens, Global IT News, Global Security News, MIT, open source, open source licensing
Open source licenses: Everything you need to know
Open source makes the technology world go ’round, forming as much as 90% of the modern software stack via frameworks; libraries; databases; operating systems; and countless standalone applications. The benefits of open source software are well understood, promising greater control and transparency. However, there’s a perennial struggle between the open source and proprietary realms, leading…
AI, generative ai, Global IT News, Global Security News, open source, reasoning, Research, sky-t1
Researchers open source Sky-T1, a ‘reasoning’ AI model that can be trained for less than $450
So-called reasoning AI models are becoming easier — and cheaper — to develop. On Friday, NovaSky, a team of researchers based out of UC Berkeley’s Sky Computing Lab, released Sky-T1-32B-Preview, a reasoning model that’s competitive with an earlier version of OpenAI’s o1 on a number of key benchmarks. Sky-T1 appears to be the first truly…
Artificial Intelligence, Developer, endor labs, Global Security News, open source, Security, Software
What’s Next for Open Source Software Security in 2025?
Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure use of open-source software in 2025.
costs, Cybersecurity, DCV, Featured, Global Security News, News, open source, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X, Spotlight
DigiCert Open Sources Domain Control Validation Software
DigiCert has made available a Domain Control Validation (DCV) library under an open-source software license as part of a larger effort to enable certificate authorities (CAs) to reduce total costs. The post DigiCert Open Sources Domain Control Validation Software appeared first on Security Boulevard.
Global Security News, Networking, open source, secure copy, Security, ssh key
How To Use SCP (Secure Copy) With SSH Key Authentication
Here’s how to use the secure copy command, in conjunction with ssh key authentication, for an even more secure means of copying files to your remote Linux servers.
Confluent, Elastic, Enterprise, evergreens, Global IT News, Global Security News, MongoDB, open source, open source license, redis
Open source companies that go proprietary: A timeline
Open source might be the building blocks of the modern software stack, but companies building businesses off the back of open source software face a perennial struggle between keeping their community happy and ensuring that third parties don’t abuse the permissions afforded by the license. Many companies have launched with lofty open source ambitions, only…
AI, generative ai, Global IT News, Global Security News, Microsoft, open source, phi-4, Research
Microsoft debuts Phi-4, a new generative AI model, in research preview
Microsoft has announced the newest addition to its Phi family of generative AI models. Called Phi-4, the model is improved in several areas over its predecessors, Microsoft claims — in particular math problem solving. That’s partly the result of improved training data quality. Phi-4 is available in very limited access as of Thursday night: only…
AI, deepfakes, generative ai, Global IT News, Global Security News, Media & Entertainment, Meta, meta video seal, open source, watermarking
Meta debuts a tool for watermarking AI-generated videos
Meta is open sourcing a method to watermark AI-generated videos. Called Meta Video Seal, the company says it’s robust against compression and edits. © 2024 TechCrunch. All rights reserved. For personal use only.