open_source

San Francisco – November 06, 2026 -- Constructive has released Safegres, an open-source verifier that grades which roles can reach which rows in a live PostgreSQL database, after recent scans found 24,664 of 159,041 Lovable-built projects serving records to anonymous visitors.

Safegres audits row-level security (RLS) policies and grants in read-only mode. It never touches application data or changes anything, so teams can run it against a production copy or automatically on every database change.

Scans found thousands of AI-built apps exposing Postgres data

On Nov. 2, Hamburg security firm Crissy Field and the German newspaper Handelsblatt scanned 159,041 projects built with AI app builder Lovable. They found 24,664 sites whose Postgres databases served records to anonymous visitors, 7,403 of them exposing email addresses.

San Francisco – November 06, 2026 -- Linux Foundation Networking (LFN) has named six keynote speakers for ONE Summit Japan 2026, from SoftBank, NTT, NGMN Alliance, AI-RAN Alliance, the U.S. Department of Defense and the Linux Foundation. The event runs Dec. 10-11 in Tokyo alongside Open Source Summit Japan.

Operators, alliances and the Pentagon fill the keynote stage

The lineup includes Ryuji Wakikawa, head of the Research Institute of Advanced Technology at SoftBank, and Masahisa Kawashima, IOWN technology director at NTT. Marlan Macklin, deputy principal director for FutureG in the Office of the Under Secretary of Defense for Research and Engineering, will also speak. Anita Döhler, CEO of NGMN Alliance, and Alex Choi, executive director of AI-RAN Alliance, complete the external speakers. Arpit Joshipura, general manager of Networking, Edge & IoT at the Linux Foundation, will also present.

Global – November 04, 2026 -- CIQ released fixed PHP packages for Rocky Linux from CIQ Pro (RLC Pro) LTS 9.6 and 9.2 about three and a half hours after the upstream PHP2Shell fix went public, covering PHP 8.0, a version upstream no longer supports. Fixes for the php:7.4 and php:8.2 module streams followed over the next two days.

Upstream fixes skip PHP 7.2, 7.3 and 5.4

The PHP project released fixes for PHP 8.2 through 8.5 and published source-only fix branches for 7.4, 8.0 and 8.1. It released nothing for 7.2 and 7.3, or for the PHP 5.4 that CentOS 7 ships. Teams that self-support those versions must build and test the fix themselves, or the version stays exposed.

Beijing – November 04, 2026 -- The World Internet Conference (WIC) Distinguished Contribution Award went to two individuals and 15 enterprises at the opening ceremony of the 2026 WIC Wuzhen Summit, and several winners named open source and openness as the basis of their growth. The award recognizes contributions to global internet-related fields since its inception in 2024.

Zelos reaches 300 Chinese cities and more than 20 countries and regions in five years

Zelos, which builds autonomous-driving unmanned logistics vehicles, says it has expanded to more than 300 cities in China and over 20 countries and regions since its debut five years ago. Founder and CEO Kong Qi said open source and openness "lower the barrier to innovation." According to the report, the technology is helping upgrade urban freight road networks, cutting costs and raising efficiency.

New York – – November 03, 2026 -- Egan-Jones Ratings warns that free open-source software and artificial intelligence are weakening software incumbents' staying power, and that some credit models overstate how secure incumbency is. The commentary is addressed to institutional investors and risk managers holding software and platform credit.

Free substitutes cap what incumbents can charge

Egan-Jones finds that open-source products need not dominate a market to constrain pricing. A free alternative limits what an incumbent can charge before it loses significant share. Linux has gained significant share among personal computer operating systems over the past five years, and open-source software holds virtually the entire enterprise supercomputer market.

SHENZHEN – October 30, 2026 -- TerraMaster is paying developers up to $30 per eligible app listed in its TOS App Center by April 30, 2027, as the NAS maker launches its TOS Developer Platform and App Listing Reward Program.

The company is targeting independent developers, open-source project maintainers, homelab users and self-hosting advocates worldwide. Approved applications will be published in the global TOS App Center and distributed to TerraMaster NAS users. Rewards scale with the number of eligible apps a developer publishes.

Platform accepts Debian and Docker packages with automated validation

The platform provides development documentation and packaging templates for Debian (.deb) and Docker. Developers can submit online, track review status and use API access to connect submissions to existing CI/CD release workflows. Automated validation is built into the process.

Darmstadt – October 29, 2026 -- Only 30% of German companies have governance structures suited to agentic AI, according to figures cited by Gregor von Jagow, Senior Director and Country Manager Germany at Red Hat. He argues that open technology, not new vendor dependencies, is the route out of the pilot phase.

Von Jagow says building AI agents is no longer the main hurdle. The challenge is deploying them productively: integrating them reliably into existing business processes, limiting their access to defined areas and meeting security requirements.

Missing exit strategies restrict service access at 57% of firms

Many companies struggle to move agents beyond pilot projects. Scaling requires clear access rights, defined responsibilities and the ability to prevent unwanted agent behavior. The cited data also shows that 57% of companies face restricted access to some services because they lack an exit strategy for switching providers.

Shanghai – October 16, 2026 -- RoboParty has launched RP1 (ROBOTO 01), a humanoid robot with open access to its hardware designs, low-level drivers, control algorithms and software stack, aimed at embodied AI research. The standard version stands about 1.3 meters tall with 24 actuated degrees of freedom (DoF), while the Pro version offers 30.

RP1 opens actuator designs, firmware and control code to researchers

RoboParty is publishing the robot body design and technical resources for its in-house ROMOMO joint actuator modules, along with technical documentation and research materials. The company says the release covers mechanical structures, actuators, motion control, simulation environments, software development kits (SDKs) and training tools.

Munich – October 15, 2026 -- TIER IV and the Technical University of Munich (TUM) have established the TUM Autoware Research Center by TIER IV, a multi-year research collaboration that combines three TUM research groups to build safe, scalable autonomous driving systems on the open-source Autoware stack.

TIER IV is funding the center strategically. The groups involved are the Chair of Automotive Technology (FTM) and the Professorships of Cyber Physical Systems (CPS) and Autonomous Vehicle Systems (AVS). The center is meant to serve as a long-term base for autonomous driving research, open-source software development and doctoral training. It will also link academic, industrial and public-transport projects and offer a platform for demonstrations and benchmark challenges.

United States – October 12, 2026 -- Sylabs will end-of-life SingularityPRO, Singularity Enterprise and SingularityCE on October 25, 2026, the date its engineering work on the SingularityCE project and Singularity ecosystem stops. CIQ, which backs the competing Apptainer project, says it is already moving to absorb Singularity's user base.

Sylabs releases formerly commercial features as open source

Sylabs is closing out SingularityPRO and Singularity Enterprise by open-sourcing functionality previously reserved for those paid offerings. CIQ expects the Apptainer community to pick up and maintain those features.

Singularity's 2015 HPC origins lead to a split in 2021

Gregory Kurtzer started Singularity at Lawrence Berkeley National Laboratory in 2015 for multi-user HPC clusters, where Docker's security model did not fit. He founded Sylabs in 2017 to develop it commercially.