Search: “apache”

3 stories in the last 7d

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 67 AI tools & infra 4 Model release 3 Exploit / PoC 3 AI industry 3 Advisory 1 Industry 1 Phishing & fraud 1 Tools 1 AI research 1

SeverityAll critical 1 high 14 medium 43 low 14 info 13

Google stole open source code without crediting the authors (Artemis/Minitap)

Minitap alleges Google's Artemis mobile-agent project reused its open-source mobile-use code and stripped author attribution, despite Apache 2.0 requirements.

Minitap says Google's Artemis project for automating mobile devices contains code identical to its open-source mobile-use agent, including the Hopper agent's verbatim instructions and a WhatsApp messaging example, and that a package file listing authors Pierre-Louis Favreau, Jean-Pierre Lo, and Nicolas Dehandschoewercker was replaced via an August force push removing their names. The company argues this conflicts with Apache 2.0's requirement to preserve copyright and attribution notices. Minitap also claims the AndroidWorld leaderboard ignored its later 94.8% and 100% submissions while showing Artemis at 99.1% and mobile-use at 91.4%. It has published a public factual record with archived file comparisons.

Hacker News · securitySep 12, 02:39 UTC · 5d agoAI industry HN 25↑ · 6 comments

[AINews] Reality Checks on AI News (Yegge shuts down Gas Town, Databricks’ +60% Astra cost)

Latent Space AI news roundup: Steve Yegge shuts down Gas Town, Databricks reports 60% higher coding spend on GPT-6 Astra, OpenAI launches misalignment disclosure framework.

Latent Space's AI News digest for September 15-16, 2026 leads with Steve Yegge shutting down his Gas Town orchestrator despite spending thousands monthly on coding-agent subscriptions. Databricks rolled out GPT-6 Astra to roughly 3,500 engineers, reporting superior long-horizon performance over Opus 5 and Sol 5.6 but a ~60% increase in coding spend. OpenAI published a formal framework for disclosing model misalignment incidents with six case reports, while Microsoft and Google Research released safety papers on 'capability laundering' and the Fuse motive-inference benchmark. Xiaomi shared live RL training telemetry for MiMo-V2.6, estimated at $493k/day for the 1T-class Pro run.

Latent Space07:28 UTC · 5h agoAI industry 11 sources

AI is adding to the review load on open-source projects, many of them thinly funded

ACM Technology Policy Council authors warn AI-generated code is overwhelming thinly funded open-source maintainers, raising software supply chain security risks.

Six authors including Simson Garfinkel and Josiah Dykstra, writing for the ACM Technology Policy Council, argue AI coding tools flood open-source projects with contributions that human maintainers must still review. They cite Google's CodeMender agent contributing 72 security fixes to open-source projects, some as large as 4.5 million lines of code, between April and October 2025. Funding is lopsided: the Linux Foundation raised $292,217,236 in 2024 versus $2,379,402 for the Apache Software Foundation. They also note most open-source applications still ship no SBOM despite US and EU mandates, and attackers increasingly plant malicious packages in popular repositories.

Help Net Security04:30 UTC · 7h agoAI industry1