Application Security
Hopper has emerged from stealth mode with a solution designed to help organizations manage open source software risk.
Hi, what are you looking for?
SecurityWeek
All posts tagged "open source"
Application Security
Google has integrated OSV-SCALIBR features into OSV-Scanner, its free vulnerability scanner for open source developers.
Supply Chain Security
Report from the Department for Science, Innovation & Technology (DSIT) finds weaknesses in current practices.
Application Security
The Open Source Security Foundation (OpenSSF) has created a structured set of security requirements for open source projects.
Application Security
Opengrep is a new consortium-backed fork of Semgrep, intended to be and remain a true genuine OSS SAST tool.
Application Security
Google releases OSV-SCALIBR, an open source library for software composition analysis and file system scanning.
Supply Chain Security
Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.
Application Security
Google has announced the open source availability of Vanir, a patch validation tool for Android platform developers.
Application Security
GitHub has launched a $1.25 million fund to be invested in improving the security of 125 open source projects.
Funding/M&A
Software supply chain security startup Chainguard raises a $140 million Series C round that values the company at $1.2 billion.
Application Security
Most critical open source software contains code written in a memory unsafe language, US, Australian, and Canadian government agencies warn.
Cloud Security
The CloudGrappler open source tool can detect the presence of known threat actors in cloud environments.
Application Security
Concluding a two-day OSS security summit, CISA details key actions to help improve open source security.
ICS/OT
Cisco has released an open source PoC tool named Badgerboard designed for improved backplane network visibility for OT.
Fraud & Identity Theft
The open source platform Tazama provides cost-effective monitoring of digital financial transactions to prevent fraud in real time.
Threat Intelligence
Open source is a great way to test the waters and define requirements. But when looking at putting a platform into production, an enterprise-ready...
Application Security
Google has released its fuzzing framework in open source to boost the ability of developers and researchers to identify vulnerabilities.
Supply Chain Security
Two new products aim to secure the traditional OSS supply chain, and the new AI model software supply chain.
ICS/OT
A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each...
Vulnerabilities
Dozens of Squid caching proxy vulnerabilities remain unpatched two years after a researcher reported them to developers.
ICS/OT
Many of the industrial control system (ICS) instances seen in internet scanning are likely or possibly honeypots, not real devices.
Vulnerabilities
Incident Response
Vulnerabilities
Malware & Threats
