Open Source Software

The Dutch government is developing an alternative to Microsoft's software stack built on NixOS, the declarative Linux distribution. The project, presented via the DAWO community platform, is part of efforts to reduce dependence on a single US vendor and strengthen digital sovereignty in public administration. The move has drawn attention among open-source advocates and public-sector IT watchers.

Nvidia has introduced an open-source platform designed to make AI agents safer to deploy, giving developers tools to test and guard against unsafe behaviour. The move, reported by SC Media, positions Nvidia alongside other major tech firms racing to address security and reliability concerns as autonomous AI systems spread across enterprise software.

Nvidia announced the Open Agent Safety Platform, combining open source software with a reference system design that uses a hardware-based watchdog to keep AI agents within set boundaries. The announcement, reported by SecurityWeek, comes amid growing concern over autonomous AI agents acting unpredictably, and positions Nvidia to supply safety tooling for enterprise AI deployments.

Huawei is expanding its open source involvement beyond infrastructure software into AI agents, according to a report by Techzine. The company is positioning itself as a major contributor to open source projects across its technology stack, reflecting a broader industry shift toward collaborative development in artificial intelligence tooling.

GitHub says it discovered 24 vulnerabilities in Android using its open-source AI security agent, describing it as automated vulnerability discovery at scale on real production software. The company published details in a blog post, and the report is drawing attention as a notable demonstration of AI agents doing practical security research on widely used code.

Huawei has released openPangu 2.0, the latest version of its AI software stack, as open source. The move lets developers inspect, adapt and build on the company's AI tooling, and positions Huawei to broaden its ecosystem amid competition with US rivals in artificial intelligence infrastructure.

Open source artificial intelligence is reshaping the IT services industry, altering how vendors build, price and deliver technology solutions. The shift is prompting discussion about which service providers can adapt their business models as freely available AI models reduce dependence on proprietary software and change client expectations.

Nvidia has released a new open-source framework aimed at improving the security of artificial intelligence systems. The tool is intended to help developers identify and address vulnerabilities in AI applications. Details about the framework's features, supported platforms, and initial adoption remain limited, but the move aligns with the broader industry push toward safer and more transparent AI development practices.

GitHub researchers report that an open source AI security agent they built uncovered 24 vulnerabilities in Android. The company says the tool was used to scan Android code at scale, flagging security flaws automatically. The disclosure highlights a growing trend of using AI agents to find real bugs in widely used software, and the work is being discussed as an example of AI-assisted security research.

The Dutch government has chosen NixOS, a configurable Linux distribution, as the basis for a sovereign desktop strategy, aiming to reduce dependence on foreign software vendors such as Microsoft. The move aligns the Netherlands with a broader European push toward open-source digital autonomy. Technology observers see it as a notable endorsement of NixOS, which is less commonly used at government scale.

Defense Unicorns has been awarded a $350 million Department of War contract to deliver an open-source platform aimed at improving how software reaches military users. The company, which specializes in software delivery tooling for defense applications, will provide a platform designed to speed up and streamline deployment of software across defense systems, part of a broader push to modernize government software practices.

At KDE's annual Akademy conference, a presentation proposing an "AI-native KDE" sparked debate among developers, leading KDE developer Nate Graham to open a discussion about proposed restrictions on AI-generated contributions. KDE and GNOME communities are now weighing how to handle code and other contributions produced with AI tools, balancing enthusiasm for automation against concerns over quality, licensing and maintainability. The debate has drawn attention across the free software world.

Stanford University and Nvidia have open-sourced CLM-8B, an AI model built for software agents that caches reusable actions instead of recomputing them. In tests the model ran up to nine times faster than Jev, a comparable agent system. The open release is drawing attention for offering large speed gains on agentic workloads, an area where inference cost is a major bottleneck for developers.

Google is tightening restrictions on Android sideloading, requiring developer verification that threatens independent app distribution. In response, F-Droid, the free and open-source app marketplace, is rolling out a major overhaul of its platform and planning for a future in which Google's rules make installing apps outside the Play Store harder. Supporters see the update as a defense of user choice and software freedom on Android.

After the International Criminal Court's chief prosecutor lost access to Microsoft services under US sanctions, the Netherlands is moving forward with DAWO, a sovereign workplace for public authorities built on NixOS. The system uses open source code, replaces GitHub with Forgejo, and is designed to connect with openDesk. A pilot is underway in municipalities, with officials citing stability and digital independence from US providers.

The Clop ransomware gang has moved to new server infrastructure after exploiting a vulnerability in Grav CMS, the open-source flat-file content management system. The extortion group, known for large-scale data-theft campaigns against corporations and government agencies, is continuing operations despite the disruption. Security teams are being urged to patch Grav CMS installations and review whether their systems were targeted.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

Red Hat has set out its approach to building artificial intelligence that is flexible, accountable and sovereign, according to Cyber Magazine. The enterprise software company is positioning itself around open source principles as organisations and governments seek AI systems they can control, audit and run on their own infrastructure rather than depending on a handful of large US cloud providers.

Tech commentator Snazzy Labs argues that free, open-source software is now outperforming many paid Mac applications, with open alternatives matching or exceeding commercial offerings in quality and features. The claim has drawn heavy engagement, fueling debate among Mac users over whether they still need to pay for utilities, editors and productivity tools that community-developed projects now cover just as well.

IBM and Red Hat have remediated more than 400 previously unknown vulnerabilities in open source software. The security fixes were announced via press release, highlighting the companies' ongoing work identifying and patching flaws in widely used open source projects. No further details on the specific vulnerabilities or affected systems were provided.

The open-source Shotcut video editor has released version 26.9, bringing improvements to the VA-API HEVC hardware encoder on Linux and adding support for FFmpeg 9. Linux and open-source communities are sharing the update, which should appeal to users doing hardware-accelerated video encoding on free software platforms.