ICS/OT
A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each...
Hi, what are you looking for?
SecurityWeek
All posts tagged "open source"
Vulnerabilities
Dozens of Squid caching proxy vulnerabilities remain unpatched two years after a researcher reported them to developers.
Government
CISA, FBI, NSA, and US Treasury published new guidance on improving the security of open source software in OT and ICS.
Identity & Access
The Linux Foundation has announced OpenPubkey, an open source cryptographic protocol that should help boost supply chain security.
Network Security
Silverfort has released the source code for its lateral movement detection tool LATMA, to help identify and analyze intrusions.
Application Security
CISA details its plan to support the open source software ecosystem and secure the use of open source software within the federal government.
Supply Chain Security
If after eighteen months, meaningful use of SBOMs is unachievable, we need to ask what needs to be done to fulfill Biden’s executive order.
Application Security
NCC Group announces new open source tools for finding hardcoded credentials and for distributing cloud workloads.
Application Security
Red Hat rolls out a new suite of tools and services to help mitigate vulnerabilities across every stage of the modern software supply chain.
Application Security
OpenSSF has added four new members and is receiving $5 million in funding for its Alpha-Omega open source software security project.
Data Protection
Data security firm Satori has released a free and open source tool designed to help organizations find out who has access to what data...
Supply Chain Security
Endor Labs has introduced an OWASP-style listing of the most important or impactful risks inherent in the use of open source software (OSS).
Endpoint Security
Apple's security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.
Identity & Access
Vulnerabilities
Malware & Threats
Artificial Intelligence
Network Security
Zyxel patches at least 15 security flaws that expose users to authentication bypass, command injection and denial-of-service attacks.
