Analysis shows most security risk sits in longtail open source images, with 98% of CVEs outside top projects & Critical flaws ...

The Open Source Security Foundation (OpenSSF) has had enough of being the unpaid janitor of the world's software supply chain.… A coalition of heavyweight open source foundations issued a joint ...

Open source enters 2026 as core enterprise infrastructure, with growing pressure around sustainability, governance, funding, ...

Since Russian troops invaded Ukraine more than three years ago, Russian technology companies and executives have been widely sanctioned for supporting the Kremlin. That includes Vladimir Kiriyenko, ...

Open-source software has become a prime target in the escalating wave of cybersecurity threats. As attacks grow more sophisticated, the open-source community is racing to close critical security gaps ...

Open source components continue to cause huge problems for security practitioners, and AIxCC was created to determine whether automation could help close the gap. At DEF CON 33, DARPA announced the ...

The open-source software movement has long been a symbol of global collaboration, transparency and shared progress. Yet, as China rapidly ascends to a leadership position in open source, especially in ...

DevSecOps, short for Development, Security, and Operations, is a methodology that integrates security practices into software Development Operations (DevOps). It emphasizes that security should be a ...

Eight organizations that operate the world’s largest software package registries issued a coordinated warning that their current funding model was “dangerously fragile,” signaling potential changes to ...