A quote from Daniel Stenberg

AI CVE Slop: The Crisis Drowning Open Source Security

The proliferation of AI-generated vulnerability reports — commonly termed “AI slop” — has emerged as one of the most significant…

AI-SLOP: Develop best current practises for Open Source maintainers · Issue #178 · ossf/wg-vulnerability-disclosures

Open source projects are increasingly facing a wave of low-quality, AI-generated vulnerability reports and contributions—commonly referred to as "AI-slop." This issue aims to develop best...

Security incident disclosure — July 2026

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

The Arguments Against Open Source AI are Very Bad | Tom Bedor's Blog

The release of Kimi K3 has opened a fresh round of angst and confused discourse. There's a loud cohort of journalists, business leaders, and politicians arguing that open source AI is a dangerous threat. OpenAI's Dean Ball:

Unpacking Open Source Artificial Intelligence: Toward a Framework for Openness in Foundation Models

Openness has long driven innovation in software,9 and AI is no exception.12 While some see openness in foundation models (FMs) as a security threat,18 others argue that restricting access will not meaningfully reduce risk and will limit the benefits of transparency, research, and global participation.3 As the EU AI Act reporting requirements on FMs—also referred to as general-purpose AI models (GPAIMs)—move toward implementation, there is an urgent need for a more nuanced and informed understanding of openness in AI systems.

Top AI Security Incidents of 2025 Revealed | Adversa AI

Discover how AI systems are being hacked in the wild — from prompt injection to agent abuse — with real breaches, lessons, and defenses in Adversa AI’s 2025 report.

New AI Flaw Reporting System Fills Crucial Security Gap | CMU Software Engineering Institute

Flaw Reporting for AI (FLARE-AI) allows developers and security researchers to submit artificial intelligence flaws for formal, coordinated disclosure.

Rethinking security for the age of AI - The Official Microsoft Blog

Editor’s note: Updates with additional details on the model’s crash score. Why security needs a new cyber stack — Introducing Project Perception The physics of cybersecurity are changing. Autonomous systems can now reason, adapt and operate continuously. At the same time, the cost of offense is falling, while the volume, velocity and complexity of what...

How AI slop is causing a crisis in computer science

Preprint repositories and conference organizers are having to counter a tide of ‘AI slop’ submissions.

Measuring the Impact of Early-2025 AI on Experienced Open-Source...

Despite widespread adoption, the impact of AI tools on software development in the wild remains understudied. We conduct a randomized controlled trial (RCT) to understand how AI tools at the...

The Open Source AI Definition – 1.0

version 1.0 See FAQsSee list of endorsementsSee ChecklistEndorse the OSAID Preamble Why we need Open Source Artificial Intelligence (AI) Open Source has demonstrated that massive benefits accrue to…

AI Slopageddon and the OSS Maintainers

AI slop is ripping up the social contract between maintainers and contributors essential to open source development. Practitioners have been repeatedly assured that AI would supercharge their communities, but so far that hasn’t been the case. Just look at what happened last month. Mitchell Hashimoto’s Ghostty implemented a zero-tolerance policy where submitting bad AI-generated code