Category / T-CAT / SOFTWARE
Software
Software / T-2026-4673
llama.cpp b10276: the release where the supply chain is the story
llama.cpp b10276 ships a tiny npm fix but a huge portability matrix. The real story is the supply chain.
Sourceggerganov/llama.cpp b10276
Software / T-2026-6699
Uber's ADR shows enterprise AI security is becoming a detection problem
Uber open-sources ADR, an agentic AI detection and response system, signaling a shift in enterprise AI security.
Sourceuber/ADR
Software / T-2026-1120
antirez's DwarfStar turns the local-AI story upside down
antirez ships DwarfStar, a DeepSeek V4 Flash inference engine for Metal, CUDA, and ROCm that challenges the generalist-runner orthodoxy.
Sourceantirez/ds4
Software / T-2026-6300
DeepSeek-Reasonix bets the coding-agent future on prefix-cache economics
DeepSeek-Reasonix is a terminal coding agent built around prefix-cache stability. A look at what that design says about AI economics.
Sourceesengine/DeepSeek-Reasonix
Software / T-2026-4451
ComfyUI's CVE-2026-56673: A 7.5 path traversal in the AI art stack
CVE-2026-56673 lets unauthenticated ComfyUI workflows exfiltrate host image files. A 7.5 CVSS that exposes deeper AI-tooling trust gaps.
SourceCVE-2026-56673 (CVSS 7.5 HIGH)
Software / T-2026-3521
OpenAI's v2.52.0 Python SDK ships content provenance checks: the quiet turn toward verifiable AI
OpenAI's openai-python v2.52.0 adds content provenance checks. What looks like a minor SDK release signals a strategic shift toward verifiable AI output.
Sourceopenai/openai-python v2.52.0
Software / T-2026-6937
OpenWork takes on Claude Cowork by making AI workflows portable
different-ai's OpenWork is an open-source alternative to Claude Cowork, built around portable AI workflows.
Sourcedifferent-ai/openwork
Software / T-2026-8901
Hugging Face’s speech-to-speech pipeline makes local voice agents a CLI install away
Hugging Face ships speech-to-speech, a modular voice-agent pipeline that runs locally with open models. The implications for AI research and deployment.
Sourcehuggingface/speech-to-speech
Software / T-2026-2199
Microsoft's Agent Governance Toolkit: intercepting agent actions before the prompt
Microsoft's Agent Governance Toolkit ships policy enforcement, zero-trust identity, and audit logging for AI agents, intercepting tool calls in deterministic code before they…
Sourcemicrosoft/agent-governance-toolkit
Software / T-2026-3650
llama.cpp b10156: One Flag, Many Lessons for Local AI
llama.cpp b10156 disables -ffast-math on HIP. The fix reveals deeper tensions between optimization and correctness for local AI on AMD hardware.
Sourceggerganov/llama.cpp b10156
Software / T-2026-4265
OpenAI drops Python 3.9 support: what the v2.49.0 deprecation signals
OpenAI's openai-python v2.49.0 drops Python 3.9 support and automates version reviews. The change signals tighter lifecycle management for the AI SDK.
Sourceopenai/openai-python v2.49.0
Software / T-2026-8595
CVE-2026-64281: The kernel bug that could freeze an AI cluster
A Linux kernel bug in svcrdma can permanently freeze NFS-over-RDMA connections, a transport layer critical to AI cluster storage.
SourceCVE-2026-64281