Vulnerabilities
The agentic security tool identifies potentially exploitable code flaws, traces attack paths, and recommends targeted remediations.
Hi, what are you looking for?
SecurityWeek
All posts tagged "open source"
Application Security
It will provide the tools and channels to report, patch, and disclose open source software vulnerabilities.
Application Security
Over two dozen organizations built a shared platform to triage vulnerabilities, fix them, and secure the software before patches arrive.
Vulnerabilities
Project Lightwell is designed to fix vulnerabilities without breaking what is already in production.
Artificial Intelligence
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response.
Malware & Threats
Two malicious versions of the popular SDK were uploaded to the PyPI registry, targeting Windows, macOS, and Linux.
Supply Chain Security
Hackers published a malicious scanner release and replaced tags to point to information-stealer malware.
Cybersecurity Funding
Anthropic, AWS, Google, Microsoft, and OpenAI fund the Linux Foundation’s long-term security initiatives focused on open source software.
Artificial Intelligence
Codex Security, formerly Aardvark, has found hundreds of critical vulnerabilities in tested software in the past month.
Threat Intelligence
Quantickle is a browser-based tool designed for creating visual representations of threat research.
Supply Chain Security
From open source libraries to AI-powered coding assistants, speed-driven development is introducing new third-party risks that threat actors are increasingly exploiting.
Cloud Security
Participants earned rewards at the hacking competition for Grafana, Linux Kernel, Redis, MariaDB, and PostgreSQL vulnerabilities.
Cybersecurity Funding
Chainguard has raised $636 million in the past six months alone for its software supply chain security solutions.
Phishing
Threat actors impersonating PyPI ask users to verify their email for security purposes, directing them to fake websites.
Application Security
The open source security firm will use the investment to enhance go-to-market efforts and accelerate platform expansion.
Application Security
HeroDevs has received a $125 million strategic growth investment from PSG to secure enterprise security stacks.
Vulnerabilities
A vulnerability in the extension publishing mechanism of Open VSX could have allowed attackers to tamper with any repository.
Malware & Threats
Security firm Socket warns flags a campaign targeting NPM users with tens of malicious packages that can hijack system information.
Application Security
Hopper has emerged from stealth mode with a solution designed to help organizations manage open source software risk.
Application Security
Google has integrated OSV-SCALIBR features into OSV-Scanner, its free vulnerability scanner for open source developers.
Artificial Intelligence
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.
Malware & Threats
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug...
Artificial Intelligence
Data Breaches
Malware & Threats
Vulnerabilities
