open-source software

The Dutch government is developing an alternative to Microsoft's software ecosystem, built on NixOS, the reproducible Linux-based operating system. The initiative, surfaced via the DAWO community platform, reflects growing European interest in digital sovereignty and reducing dependence on US tech vendors. Commenters are discussing the technical merits of NixOS for public-sector deployments and what the move means for open-source adoption in government.

Nvidia has introduced an open-source platform designed to make AI agents safer to deploy, giving developers tools to test and guard against unsafe behaviour. The move, reported by SC Media, positions Nvidia alongside other major tech firms racing to address security and reliability concerns as autonomous AI systems spread across enterprise software.

GitHub says it discovered 24 vulnerabilities in Android using its open-source AI security agent, describing it as automated vulnerability discovery at scale on real production software. The company published details in a blog post, and the report is drawing attention as a notable demonstration of AI agents doing practical security research on widely used code.

Nvidia has released a new open-source framework aimed at improving the security of artificial intelligence systems. The tool is intended to help developers identify and address vulnerabilities in AI applications. Details about the framework's features, supported platforms, and initial adoption remain limited, but the move aligns with the broader industry push toward safer and more transparent AI development practices.

The Dutch government has chosen NixOS, a configurable Linux distribution, as the basis for a sovereign desktop strategy, aiming to reduce dependence on foreign software vendors such as Microsoft. The move aligns the Netherlands with a broader European push toward open-source digital autonomy. Technology observers see it as a notable endorsement of NixOS, which is less commonly used at government scale.

Defense Unicorns has been awarded a $350 million Department of War contract to deliver an open-source platform aimed at improving how software reaches military users. The company, which specializes in software delivery tooling for defense applications, will provide a platform designed to speed up and streamline deployment of software across defense systems, part of a broader push to modernize government software practices.

The Clop ransomware gang has moved to new server infrastructure after exploiting a vulnerability in Grav CMS, the open-source flat-file content management system. The extortion group, known for large-scale data-theft campaigns against corporations and government agencies, is continuing operations despite the disruption. Security teams are being urged to patch Grav CMS installations and review whether their systems were targeted.

Stanford University and Nvidia have open-sourced CLM-8B, an AI model built for software agents that caches reusable actions instead of recomputing them. In tests the model ran up to nine times faster than Jev, a comparable agent system. The open release is drawing attention for offering large speed gains on agentic workloads, an area where inference cost is a major bottleneck for developers.

Anthropic has acquired Stainless, the developer tooling company behind a popular SDK generator, and has shut down the generator service. In response, Cloudflare has open-sourced Forge, its own alternative for generating software development kits. Developers who relied on Stainless are now weighing Cloudflare's Forge as a replacement, sparking discussion about tooling ownership and the future of open-source SDK generation.

Google is tightening restrictions on Android sideloading, requiring developer verification that threatens independent app distribution. In response, F-Droid, the free and open-source app marketplace, is rolling out a major overhaul of its platform and planning for a future in which Google's rules make installing apps outside the Play Store harder. Supporters see the update as a defense of user choice and software freedom on Android.

The open-source Shotcut video editor has released version 26.9, bringing improvements to the VA-API HEVC hardware encoder on Linux and adding support for FFmpeg 9. Linux and open-source communities are sharing the update, which should appeal to users doing hardware-accelerated video encoding on free software platforms.

Manifest has joined Chainguard's Athena Coalition, an initiative aimed at identifying open-source software risk inside commercial software products. The announcement was carried by Business Wire and picked up by outlets including Yahoo Finance. The coalition brings companies together to improve visibility into the open-source components embedded in software supply chains, a growing concern after a series of high-profile supply chain attacks.

The Document Foundation, the non-profit behind LibreOffice, published a blog post arguing that the absence of AI features is itself a selling point. The piece pushes back against the industry trend of adding AI to every productivity tool, framing LibreOffice's lack of AI as a deliberate choice that serves users who want predictable, privacy-respecting software.

The developer behind F-Droid, the open-source Android app repository, is publicly asking how the EU's proposed KIDS Act would affect free and open-source software. He notes the proposal does not appear to directly regulate projects like F-Droid, but reports hearing it might, raising concerns among free software advocates about age-verification rules covering app distribution.

Prividium has released the core engine of its platform as open source, following its first live deployment. The move means developers and organisations can now inspect, use and build on the underlying code themselves. Details beyond the announcement, including the engine's exact function and where it was first deployed, remain limited.

The Edison Design Group has open-sourced its C/C++ front-end, according to a report by Phoronix. The EDG front-end is a long-established compiler front-end widely licensed by commercial compiler and tooling vendors, so its release as open source is notable news for compiler developers and the broader software community.

A widely shared reply to Nextcloud on Mastodon argues that rooting an Android device is the basic starting point for de-Googling a phone. The steps suggested: download a browser from the Google Play store, allow software installation in settings, then get apps from F-Droid, the independent open-source app repository, instead of relying on Google services.

Eight Dutch municipalities are running their office workstations on a homegrown Linux desktop instead of Windows. The move signals growing public-sector interest in open-source software in the Netherlands, driven by desires for digital sovereignty, lower licensing costs and independence from large US vendors. Officials say the rollout shows municipal administrations can function day-to-day on a fully open-source desktop environment.

The OpenShot open-source video editor has released version 4.0.1, now available for download. The update brings improvements to the timeline and zoom functionality, an updated Razor tool, and faster keyframe and color editing. It is being shared in Linux and open-source communities as a notable maintenance release for the free editing software.

A new maintenance release of Flatpak, the Linux application sandboxing and distribution framework, is out with version 1.18.4 addressing six security vulnerabilities. Linux users and system administrators are being encouraged to update their installations promptly. The release is drawing attention in the free and open-source software and cybersecurity communities, where Flatpak updates are closely watched because the tool is widely used for running sandboxed desktop applications across Linux distributions.