Ubuntu

Researchers have developed OSReward to address the lack of standardized evaluation for reward models used by computer-using agents. The study identifies critical failure modes in existing VLM judges and introduces the OS-Shepherd model series as a cost-effective, high-accuracy alternative.

The article advocates for a proactive 'sniff test' methodology to validate the integrity of SBOMs in containerized environments. It highlights how identifying omissions like unpinned packages or missing dependencies is crucial for preventing supply chain attacks.

Researchers have identified a critical unauthenticated remote code execution vulnerability in the Exim mail server, tracked as CVE-2026-45185. The bug stems from a use-after-free condition during TLS shutdown when GnuTLS is employed.