Update: Ongoing Investigation and Continued Remediation

Mitigating High Severity RunC Vulnerability (CVE-2019-5736)

A high severity (CVSS score 7.2) vulnerability (CVE-2019-5763) was found in runc, allowing attackers to compromise the container host. Patches are already available from most providers. Aqua customers can prevent this vulnerability from being exploited by applying the appropriate runtime policies.

adammaj on Twitter / X

from the outside, it is very reasonable to interpret the past 2 weeks as an orchestrated industry-wide regulatory capture strategy.I realize that no one has properly explained yet what all the lab employees have seen that scared them so suddenly.I will try to explain -…— adammaj (@MajmudarAdam) September 12, 2026

Just a rumour of a bug is enough to find a security exploit these days

Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond

Attorney General Marshall Launches Investigation Into OpenAI and Sam Altman for Massive Artificial Intelligence Data Breach - Alabama Attorney General's Office

For Immediate Release:August 24, 2026

Treatment Processes Reported by US Public Water Systems (2004-2020)

This repository holds records on treatment processes and objectives reported by United States (US) public water systems from 2004-2020. These data were obtained via a Freedom of Information Act request made to the US Environmental Protection Agency in June 2020. Data were reported quarterly. Please refer to the associated publication (Liddie et al., 2026) for additional details on these data. Please cite both this repository and the publication if you use or refer to these data.

Bitwarden scrubs 'Always free' and 'Inclusion' values from its website as longtime execs step down - Fast Company

What is going on with the beloved open-source password manager?

Meta’s Bacterial Mystery Could Poison the Data Center Well

Water pollution in Wyoming has big implications for the future of data center development.

Joe on Twitter / X

Took a minute to write a few words about security & safety as someone who lived through it all at OpenAI. I hope my thoughts help someone out there. https://t.co/gJBf08vJH9— Joe (@joedaroo) September 27, 2026

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

Hugging Face just released this extremely detailed technical description of OpenAI's recent accidental cyberattack against their infrastructure. This attack was very sophisticated, and the resulting document doubles as a crash-course …

An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later

The country’s prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating whether OpenAI broke the law.

Security incident disclosure — July 2026

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

Coraline Ada Ehmke: The Rising Ethical Storm in Open Source

In the twenty years since the term “open source” was coined by Christine Peterson, our community has grown astronomically, all the while learning from its successes and failures. A lot has changed for open source developers in the past two decades. But the political and technological landscape has also changed.

Security Update: Suspected Supply Chain Incident | liteLLM

As of 2:00 PM ET on March 24, 2026

Microsoft's open source tools were hacked to steal passwords of AI developers | TechCrunch

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

Updated: Data Breaches Caused by Leaks in 2024

We’re tracking data breaches that are most likely caused by leaked secrets and keeping this page up-to-date.