GoKawiil
Tech News
A new password manager called Sesame has been released with its entire codebase published under the AGPL-3.0-or-later license, allowing anyone to inspect, build, and run it independently. The project emphasizes a local-first design and has seen active development, with 147 commits logged in the past 30 days as of August 22, 2026.
OCaml maintainer Anil Madhavapeddy disclosed a path traversal vulnerability in cohttp 6.3.0 and found that attackers began probing his live server with the exact exploit pattern just minutes after he opened a public GitHub pull request to fix it. He also demonstrated that AI coding agents like DeepSeek V4 Pro could independently rediscover the bug and build a working exploit in under a minute, using only a vague description of the issue.
Z.ai has published GLM-5.3 as an open-weight model, making its parameters publicly available for developers to download and run. Unsloth is preparing GGUF quantized versions of the model to allow it to run efficiently on local hardware.
A community developer has released an unofficial build that repackages Cursor's Electron-based Grok Bot app, officially available only for macOS and Windows, so it runs natively on Ubuntu and other Linux distributions. The project swaps out Windows-only native components and packages the app as a .deb, tarball, or AppImage, currently targeting Grok Bot version 0.29.0 on Electron 42.1.0.
ZDNET published a curated list of Linux distributions suited for people switching from Windows in 2026, deliberately excluding Linux Mint. Zorin OS tops the list for its Windows-like interface options and a feature that detects when a user tries to install a .exe or .msi file and suggests an open-source alternative from its app store.
The Australian Federal Police arrested two men, aged 21 and 23, from Western Australia over their alleged roles in TeamPCP, a group accused of running the longest-running spree of software supply chain attacks. TeamPCP is said to have poisoned hundreds of open-source packages using a self-propagating worm called Shai-Hulud, stealing developer credentials to spread malicious code further. KrebsOnSecurity reports it had identified the 21-year-old suspect months earlier and had been in contact with a person claiming to speak for the group.
Pollen Robotics, the robotics arm of Hugging Face, will open pre-orders for a small open-source robot called Microduck on August 27, 2026. The device is priced at $399 before taxes and shipping, with deliveries expected before Christmas 2026.
The Australian Federal Police, working with the FBI and Western Australia Police, arrested and charged a 21-year-old and a 23-year-old accused of belonging to TeamPCP, a hacking collective blamed for injecting malicious code into widely used open-source packages. The group's tampered code allegedly reached over a thousand organizations, including GitHub, OpenAI, Mistral AI, SAP and the European Commission, leading to theft of roughly half a million credentials and exfiltration of at least 300GB of data.
According to a report from The Information, Nvidia has reached a deal to purchase Hugging Face, the popular open-source AI collaboration platform, for $12.9 billion. The talks reportedly began after another suitor expressed acquisition interest in Hugging Face, and Business Insider had separately reported the startup was working with a bank to gauge buyer interest. Neither Nvidia nor Hugging Face has confirmed the deal, and CNBC said it could not independently verify the report.
The Information reports, citing a source familiar with the matter, that Nvidia has agreed to purchase Hugging Face, the widely used open-source AI model hub, in a deal valuing the company above $13 billion. Business Insider says the agreement has not yet been finalized and could still fall apart, and neither Nvidia nor Hugging Face has commented on the reports.
Sentelabs.ai has launched Open Executive, an open-source AI system designed to act as a virtual executive suite for companies. It coordinates eight specialist AI agents—covering strategy, finance, HR, legal, operations, marketing, product, and board communications—through an orchestrator built on Claude Sonnet, presenting all responses through a single unified executive voice.
Nvidia has been negotiating to buy Hugging Face, the open-source AI model-sharing platform, in a deal that would value the startup at more than $13 billion, according to a person familiar with the matter. No agreement has been reached and talks could still collapse. Microsoft had also explored a deal with Hugging Face but those discussions are no longer active.