SecurityWeek

From Open Source to OpenAI: The Evolution of Third-Party Risk

Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how ...
Hosted on MSN

Ten years of OSSRA: what a decade of data tells us about the state of open source security

When the first Open Source Security and Risk Analysis (OSSRA) report was published in 2015, the software landscape looked very different. Security teams were just beginning to grasp the implications ...
Dark Reading

Open Source Security Incidents Aren't Going Away

Open source security incidents aren't going away. The reliance on open source software (OSS) increases year-over-year, with more than 95% of all software, including open source, in some capacity. From ...
Seeking Alpha

New Synopsys Report Finds 74% of Codebases Contained High-Risk Open Source Vulnerabilities, Surging 54% Since Last Year

The Computer Hardware and Semiconductors industry contained the most open source vulnerabilities classified as high risk, followed by Manufacturing, Industrials and Robotics In the 2024 OSSRA report, ...
Nextgov

Sen. Cotton urges top White House cyber official to protect open-source software

A letter from the chairman of the Senate Intelligence Committee cites previous Nextgov/FCW reporting about a potential ...
SiliconANGLE

Seal Security raises $13M to scale automated open-source vulnerability remediation

Israeli cybersecurity startup Seal Cybersecurity Solutions Inc. today revealed that it has raised $13 million in new funding to accelerate its go-to-market efforts and expand its core vulnerability ...
SDxCentral

In Open Source Software, Security Still Needs Attention

There's a false sense of security around open source code, according to Trustwave researchers Brandon Myers and Assi Barak. Their deeper point was that open source code is prone to vulnerabilities ...
SDxCentral

Software supply chain attacks on the rise – is old open source software to blame?

In its annual State of the Software Supply Chain Report, Sonatype sheds light on alarming trends in open source software (OSS) and supply chain security. Are you still running old vulnerable open ...
Dark Reading

OPA for Windows Vulnerability Exposes NTLM Hashes

Organizations using Open Policy Agent (OPA) for Windows should consider updating to v0.68.0 or later to protect against an authentication hash leakage vulnerability identified in all earlier versions ...
SiliconANGLE

Snyk launches Secure Developer Program to strengthen open-source security

Cybersecurity company Snyk Ltd. today announced the launch of its Secure Developer Program, a new initiative designed to empower open-source software maintainers with cutting-edge, develop-friendly ...
CSOonline

Open source vulnerability scanner found with a serious vulnerability in its own code

The flaw could allow attackers to bypass Nuclei’s template signature verification process to inject malicious codes into host systems. A widely popular open-source tool, Nuclei, used for scanning ...