#Linux vulnerability
107 related articles
How GitHub Manages Open Source Depende…
·4 min
How GitHub Manages Open Source Dependency Compliance at Scale: An OSPO Practitioner's Guide
GitHub's OSPO uses automated dependency scanning, policy enforcement, and transitive risk detection to embed open source license compliance into CI/CD pipelines at scale.
Read more →
·7 min
AI Agent Code Execution Sandbox Selection Guide: In-Depth Comparison of E2B and Four Other Solutions
In-depth comparison of five AI Agent code execution sandbox solutions—E2B, Daytona, Modal, Cloudflare Sandbox, and Vercel Sandbox—across isolation, cold start latency, state management, and pricing.
Read more →
·3 min
AI Agent Authentication: The Missing Piece of the Security Architecture Puzzle
AI Agents face critical identity security challenges in cross-system collaboration. This article analyzes the Linux Foundation's Agent Name Service and the four core requirements for secure AI Agent infrastructure.
Read more →
·3 min
OpenAI Launches Open Source Vulnerability Detection Initiative: Using AI to Safeguard Open Source Security
OpenAI launches an open source vulnerability detection initiative using LLM technology to help the open source community find and fix software vulnerabilities, competing with Google and Microsoft in AI security.
Read more →
·3 min
Claude Code Permission Management Fully Explained: Configure It Right Before You Trust It
Deep dive into Claude Code's four permission categories (Bash, File, MCP, WebFetch), two-level config system, and three common pitfalls for safe AI coding.
Read more →
·4 min
Agent Beginner's Guide: Architecture Principles and Practical Efficiency Tips
A deep dive into AI Agent principles, core architecture, and practical applications. Learn how Agents differ from LLMs and how to leverage Agent Skills to boost productivity.
Read more →
·3 min
Can AI Agents Replace Security Engineers? Insights from Coding Agents Reveal the Industry Truth
In-depth analysis of AI agents' real impact on cybersecurity. From chat tools to coding agents like Crawfish and Hermes, learn how AI is reshaping security engineering and how professionals should adapt.
Read more →
·3 min
rsync Hit by AI Code Invasion: 36 Commits Trigger Open Source Infrastructure Trust Crisis
After rsync maintainer used Claude AI for 36 code commits, incremental backup functionality broke. Alpine Linux and Debian discuss rollbacks, exposing deep tensions between AI code quality and open source maintenance.
Read more →
Tutorials·3 min
Supabase Real-World Testing: How MCP+Skills Enable AI Agents to Safely Operate Databases
Supabase's experiments show how MCP+Skills solve security gaps when AI agents operate databases, with three key principles for writing effective Agent Skills.
Read more →
Tutorials·3 min
Deep Dive into ByteDance's Codex Chinese Manual: A Complete Guide Across Ten Chapters
Deep analysis of ByteDance's Codex Chinese manual covering environment setup, MCP workflows, Skills encapsulation, and multi-Agent collaboration across ten chapters for developers.
Read more →
Tutorials·3 min
Complete Guide to Installing Hermes Agent on Windows: WSL Setup and Troubleshooting Common Issues
Complete guide to installing Hermes Agent on Windows, covering WSL setup, Ubuntu initialization, API configuration, Web UI installation, and solutions for DNS, virtualization, and other common issues.
Read more →
Product Reviews·4 min
OpenHuman Deep Dive: A Context-First Open-Source Personal AI Agent
Deep dive into OpenHuman open-source AI Agent: context-first architecture, Rust+React hybrid, Memory Tree system, Token Juice compression, and multi-model routing.
Read more →
Product Reviews·3 min
Cursor 3.0 Deep Dive: The AI Agent Command Center Rewritten in Rust
Cursor 3.0 abandons VS Code entirely, rewritten from scratch in Rust as an AI agent management platform. Deep dive into its three evolutions, Composer 2 controversy, parallel agent orchestration, and the paradigm shift from assisted to autonomous coding.
Read more →
Tech Frontiers·3 min
Tech Weekly: OpenAI Swarm Framework, Claude Data Visualization & Lightweight OS Analysis
This week's tech roundup analyzes OpenAI's Swarm Agent framework, Anthropic's Claude data visualization app, Kali Linux, Unikraft lightweight OS, and Go Blueprint — covering AI, security, and cloud computing.
Read more →
Industry Insights·2 min
AI Security Audit Reports Are Crushing the curl Project: An Existential Crisis for Open Source Maintainers
curl founder Daniel Stenberg reveals AI-driven security reports have surged to 4-5x 2024 levels, overwhelming open source maintainers with unprecedented pressure.
Read more →
Industry Insights·2 min
Claude Fixes More Firefox Security Bugs in One Month Than the Previous 15 Months Combined — AI Code Auditing Delivers Stunning Results
Using Anthropic's Claude Mythos Preview, Firefox fixed more security bugs in April 2025 than the previous 15 months. Explore how AI code auditing is revolutionizing browser and open-source security.
Read more →
Tutorials·2 min
Complete Self-Study Roadmap for Cybersecurity: Four Stages from Zero to Hands-On Practice
How to self-study cybersecurity from zero? This guide provides a systematic four-stage roadmap covering fundamentals, penetration testing, range training, and real projects with recommended tools.
Read more →
Tutorials·5 min
What to Do When Your Windsurf Free Credits Run Out? A One-Click Account Switching Plugin for Unlimited Refills
What to do when Windsurf free credits run out? This article details a seamless account-switching plugin that auto-switches accounts with one click — no logout, passwords, or Token copying needed.
Read more →
Tech Frontiers·3 min
UK's GDS Publicly Opposes NHS Decision to Shut Down Open Source Repositories: The Open vs. Secure Debate in the AI Era
UK's GDS publicly opposes NHS's blanket shutdown of open source repositories over AI security concerns, advocating "open by default" in a rare public disagreement revealing deep governance tensions.
Read more →
Deep Dives·3 min
Google Agent Platform Deep Dive: Building Production-Grade AI Agents with ADK, MCP, and A2A
Deep dive into Google Cloud Next 2025's Agent Platform: ADK framework, MCP integration, A2A multi-Agent collaboration, context engineering, security governance, and a marathon simulation demo.
Read more →