Vulnerabilities
Project Lightwell is designed to fix vulnerabilities without breaking what is already in production.
Hi, what are you looking for?
SecurityWeek
All posts tagged "open source"
Artificial Intelligence
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response.
Malware & Threats
Two malicious versions of the popular SDK were uploaded to the PyPI registry, targeting Windows, macOS, and Linux.
Supply Chain Security
Hackers published a malicious scanner release and replaced tags to point to information-stealer malware.
Cybersecurity Funding
Anthropic, AWS, Google, Microsoft, and OpenAI fund the Linux Foundation’s long-term security initiatives focused on open source software.
Artificial Intelligence
Codex Security, formerly Aardvark, has found hundreds of critical vulnerabilities in tested software in the past month.
Threat Intelligence
Quantickle is a browser-based tool designed for creating visual representations of threat research.
Supply Chain Security
From open source libraries to AI-powered coding assistants, speed-driven development is introducing new third-party risks that threat actors are increasingly exploiting.
Cloud Security
Participants earned rewards at the hacking competition for Grafana, Linux Kernel, Redis, MariaDB, and PostgreSQL vulnerabilities.
Cybersecurity Funding
Chainguard has raised $636 million in the past six months alone for its software supply chain security solutions.
Phishing
Threat actors impersonating PyPI ask users to verify their email for security purposes, directing them to fake websites.
Application Security
The open source security firm will use the investment to enhance go-to-market efforts and accelerate platform expansion.
Application Security
HeroDevs has received a $125 million strategic growth investment from PSG to secure enterprise security stacks.
Vulnerabilities
A vulnerability in the extension publishing mechanism of Open VSX could have allowed attackers to tamper with any repository.
Malware & Threats
Security firm Socket warns flags a campaign targeting NPM users with tens of malicious packages that can hijack system information.
Application Security
Hopper has emerged from stealth mode with a solution designed to help organizations manage open source software risk.
Application Security
Google has integrated OSV-SCALIBR features into OSV-Scanner, its free vulnerability scanner for open source developers.
Supply Chain Security
Report from the Department for Science, Innovation & Technology (DSIT) finds weaknesses in current practices.
Application Security
The Open Source Security Foundation (OpenSSF) has created a structured set of security requirements for open source projects.
Application Security
Opengrep is a new consortium-backed fork of Semgrep, intended to be and remain a true genuine OSS SAST tool.
ICS/OT
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
Incident Response
Vulnerabilities
Artificial Intelligence
Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign nationals.
Management & Strategy
Artificial Intelligence
Vulnerabilities
Vulnerabilities
