







Experience macOS just like before
Patch the Planet: a Daybreak initiative to support open source maintainers
OpenAI introduces Patch the Planet, a Daybreak initiative helping open-source maintainers find, validate, and fix vulnerabilities with AI and expert review.

First public macOS kernel memory corruption exploit on Apple M5
Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with Mythos Preview, built a working exploit in five days.

patchright/patchright.patch at main · Kaliiiiiiiiii-Vinyzu/patchright
Undetected version of the Playwright testing and automation library. - Kaliiiiiiiiii-Vinyzu/patchright
A Quick Look at macOS - notes from shreyan
Peel back the Apple’s layers and find the rot beneath…

Just a rumour of a bug is enough to find a security exploit these days
Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond

patchwork-system/core at main · inkandswitch/patchwork-system
Patchwork system. Contribute to inkandswitch/patchwork-system development by creating an account on GitHub.
Summary of CVE-2025-55182 - Vercel
Vercel has provided a patch for CVE-2025-55182 affecting any frameworks allowing Server Components usage.
Something Big Happened in 1998
It is reasonable to accept that OSI founded Open Source with the Open Source Definition.

Steven Vandevelde (@tokono.ma)
Looks like what I've been building is quite similar to what the foundation of Patchwork-26 is. Lots of "tiny apps" (atomization of software, loosely coupled) + just the web. Local-first and where everything revolves around the content (data-first, can use preferred UI/view). Happy to see this! 🎉
An Update on OpenPRoT
sgkdev/page_inject
CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer
From Fresh Mac to Productive in 30 Minutes
I've been hearing developers talk about their dotfiles for years. "Oh yeah, I just clone my dotfiles...

Drydock: pre-publish package review
Drydock lets npm, PyPI, and VS Code maintainers review the exact package artifact before an npm stage publish or gated release goes live.

I have created Atmosynth, an #ATproto #synth patch platform. You can create, fork, and edit synth patches and play them directly in the browser, via computer keyboard or MIDI keyboard. Patches are saved in your PDS. atmosynth.at
Still trying to figure out how to talk about our Patchwork project: it's a local-first malleable software system that builds on our past work. It's shadertoy and a markdown editor but it's also a minecraft clone and an ohmjs programming language workbench. It's also none of those things, or more?