Vulnerabilities
Dozens of Squid caching proxy vulnerabilities remain unpatched two years after a researcher reported them to developers.
Hi, what are you looking for?
SecurityWeek
All posts tagged "open source"
Government
CISA, FBI, NSA, and US Treasury published new guidance on improving the security of open source software in OT and ICS.
Identity & Access
The Linux Foundation has announced OpenPubkey, an open source cryptographic protocol that should help boost supply chain security.
Network Security
Silverfort has released the source code for its lateral movement detection tool LATMA, to help identify and analyze intrusions.
Application Security
CISA details its plan to support the open source software ecosystem and secure the use of open source software within the federal government.
Supply Chain Security
If after eighteen months, meaningful use of SBOMs is unachievable, we need to ask what needs to be done to fulfill Biden’s executive order.
Application Security
NCC Group announces new open source tools for finding hardcoded credentials and for distributing cloud workloads.
Application Security
Red Hat rolls out a new suite of tools and services to help mitigate vulnerabilities across every stage of the modern software supply chain.
Application Security
OpenSSF has added four new members and is receiving $5 million in funding for its Alpha-Omega open source software security project.
Data Protection
Data security firm Satori has released a free and open source tool designed to help organizations find out who has access to what data...
Supply Chain Security
Endor Labs has introduced an OWASP-style listing of the most important or impactful risks inherent in the use of open source software (OSS).
Funding/M&A
Israeli startup Oligo Security raises $28 million to build technology to detect and mitigate open source code vulnerabilities.
ICS/OT
Otorio has released a free tool that organizations can use to detect and address issues related to DCOM authentication.
Artificial Intelligence
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
Malware & Threats
Malware & Threats
Data Breaches
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
Data Breaches
