| Date | Title | Description |
| Sign up to see | Sign up to see | Sign up to see |
| Sep 2, 2026 | HiddenLayer Raises $100M to Expand AI Security Platform | HiddenLayer Raises $100M Series B Funding
AI security company HiddenLayer has raised $100 million in a Series B financing round. Delta-v Capital led the round. Ten Eleven Ventures, Morgan Stanley, M12 and Booz Allen Ventures also participat... |
| Sep 1, 2026 | EU Cyber Resilience Act Reporting Deadline: Filing Portal Launches Same Day It Becomes Mandatory | By Jerry Owens
Published: Sep 01 2026, 4:12 PM EDT
Share on Facebook Share on Twitter Share on LinkedIn Share on Reddit Share on Flipboard |
| Jul 23, 2026 | BIND 9 Nine-CVE July Release: LLM Code Audits Push Monthly Security Patches | By Clayton Lewis
Published: Jul 23 2026, 7:30 AM EDT
Share on Facebook Share on Twitter Share on LinkedIn Share on Reddit Share on Flipboard |
| Jul 17, 2026 | Capital One releases VulnHunter, an open-source AI tool that finds software flaws before hackers do | Capital One on Thursday released VulnHunter, an open-source, agentic AI security tool that scans source code for exploitable vulnerabilities, maps out how an attacker would reach them, and proposes targeted fixes — all before a single line ... |
| May 24, 2026 | Anthropic Moves Closer to Public Claude Mythos Release: 10,000 Critical Bugs Found First | By Richard L. Wells
Published: May 24 2026, 14:07 PM EDT
Share on Facebook Share on Twitter Share on LinkedIn Share on Reddit Share on Flipboard |
| Mar 24, 2026 | Kusari Brings Enterprise-Grade AI Code Review & Dependency Management to CNCF and OpenSSF Communities | a leading innovator in software supply chain security, today announced partnerships with the Cloud Native Computing Foundation (CNCF) and the Open Source Security Foundation (OpenSSF) to make Kusari Inspector available free of charge to CNC... |
| Mar 3, 2026 | Supply Chain Security на примере кофемашины: почему ваш код горчит | Привет, Хабр! Меня зовут Максим Князев, старший системный инженер К2 Кибербезопасность. Сегодня я хочу поговорить об атаках на цепочки поставок на примере того, что все хорошо понимают и любят.
Просто представьте, как вы заказываете эспресс... |
| Feb 22, 2026 | 10 миллиардов устройств работают на его коде. Он поддерживает его в одиночку. Теперь его атакует ИИ | Один шведский разработчик заставляет curl работать на каждом телефоне, автомобиле и консоли на Земле. 47 автомобильных брендов используют его. Никто ему не платит. А теперь ИИ-боты заваливают его почтовый ящик.
Десять миллиардов установок. ... |
| Sep 29, 2025 | Организация OpenSSF подняла вопрос финансирования проектов Open Source для сохранения устойчивости инфраструктуры | Организация OpenSSF (Open Source Security Foundation, создана для объединения работы представителей индустрии в области повышения безопасности открытого ПО) представила на обсуждение открытое письмо, которое подписали разработчики репозитор... |
| Aug 25, 2025 | The World of Open Source Europe report 2025: mapping trends, challenges, and the push for digital sovereignty | Today sees the release of the Linux Foundation’s World of Open Source Europe Report 2025.
The report spotlights emerging trends and priorities in the European open source software (OSS) ecosystem, drawing on a quantitative survey and 14 qua... |
| Jun 19, 2025 | Sonatype Expands Global Operations With New India Innovation Center | Hyderabad, Telangana, India
Sonatype®, the end-to-end software supply chain security company, has announced the opening of a new Innovation Center in Hyderabad, India — a key step in its strategy to scale global, AI-driven software developm... |
| Jan 31, 2025 | Linux Foundation Europe and OpenSSF launch initiative for EU Cyber Resilience Act compliance | Linux Foundation Europe and Open Source Security Foundation (OpenSSF) have announced a global joint initiative to help prepare maintainers, manufacturers, and open source stewards for the implementation of the EU Cyber Resilience Act (CRA) ... |
| Dec 19, 2024 | Атаки на GitHub-разработчика в 2024 году | Тренд «Platform Engineering», предложенный аналитическими агентствами, стал интересен не только компаниям, которые трансформируют свои процессы, команды и инструменты согласно новым подходам. Этот тренд также интересует и злоумышленников, к... |
| Dec 10, 2024 | Исследование: открытое ПО поддерживает работу 96% современных приложений | Исследователи из Гарвардской школы бизнеса и Лаборатории инновационных наук Гарварда в партнёрстве с Linux Foundation Research и OpenSSF подготовили отчёт Census III of Free and Open Source Software. В нём говорится, что компоненты с открыт... |
| Nov 21, 2024 | Книга: «Прозрачное программное обеспечение: Безопасность цепочек поставок ПО» | Привет, Хаброжители!
Мы живем во времена, когда программное обеспечение затрагивает все аспекты нашего общества. Оно применяется повсюду, начиная с критических инфраструктур и цифровой коммерции и заканчивая национальной безопасностью. Тем ... |
| Nov 20, 2024 | GitHub launches AUD $1.91m fund for open source security | The GitHub Secure Open Source Fund has been established to allocate AUD $1.91 million (USD $1.25 million) across 125 open source projects with the aim to enhance security and sustainability in the open source ecosystem.
Initiated with the b... |
| Oct 28, 2024 | OpenSSF adds Minder as sandbox project to simplify the integration and use of open source security tools | Minder applies policies to eliminate risk across the software development lifecycle SEATTLE, WA, UNITED STATES, October 28, 2024 /EINPresswire.com/ -- The Open Source Security Foundation (OpenSSF), a cross-industry initiative of the Linux F... |
| Apr 15, 2024 | Open source groups say more software projects may have been targeted for sabotage | CybersecurityOpen source groups say more software projects may have been targeted for sabotage
By Raphael SatterApril 15, 20247:00 PM UTCUpdated ago
Save
Text
Small Text
Medium Text
Large Text
Share
Twitter
Facebook
Linkedin
Email
Link
Figu... |
| Apr 5, 2024 | Why a near-miss cyberattack put US officials and the tech industry on edge | Previous
FILE PHOTO: A man holds a laptop computer as cyber code is projected on him in this illustration picture taken on May 13, 2017. REUTERS/Kacper Pempel/Illustration/File Photo
FILE PHOTO: 3D printed models of people working on comput... |
| Apr 5, 2024 | Why a near-miss cyberattack put US officials and the tech industry on edge | CybersecurityWhy a near-miss cyberattack put US officials and the tech industry on edge
By Raphael SatterApril 5, 202411:02 AM UTCUpdated ago
Item 1 of 3 3D printed models of people working on computers and padlock are seen in front of a di... |
| Dec 4, 2023 | The Linux Foundation Japan OpenSSF announces new member companies and software security guidelines – OpenSSF Day Japan | 0 0 votes
Article Rating
Connect with
Login
I allow to create an account
When you login first time using a Social Login button, we collect your account public profile information shared by Social Login provider, based on your privacy settin... |
| Dec 4, 2023 | The Linux Foundation Japan OpenSSF announces new member companies and software security guidelines – OpenSSF Day Japan | The Linux Foundation Japan
OpenSSF announces new member companies and software security guidelines – OpenSSF Day Japan
Expanding member base and new projects continue to advance open source software security
……
This press release is based o... |
| Dec 3, 2023 | The Linux Foundation Japan OpenSSF “Guidelines for Secure Software Development” Top 10 Announced | 0 0 votes
Article Rating
Connect with
Login
I allow to create an account
When you login first time using a Social Login button, we collect your account public profile information shared by Social Login provider, based on your privacy settin... |
| Dec 3, 2023 | The Linux Foundation Japan OpenSSF “Guidelines for Secure Software Development” Top 10 Announced | The Linux Foundation Japan
OpenSSF “Guidelines for Secure Software Development” Top 10 Announced ……
This blog is based on OpenSSF Releases Top 10 Secure Software Development Guiding Principles
(https://openssf.org/blog/2023/12/03/openssf-re... |
| Aug 11, 2023 | Open Source: ключевые вызовы для разработчиков | Привет, Хабр! Меня зовут Саша Белоцерковский, я евангелист-архитектор из VK Tech, а еще раньше — из Microsoft, где волонтерил в качестве лидера глобального Open Source-сообщества. Я очень люблю Open Source, люблю людей, которые работают в н... |
| Jul 7, 2023 | A Safe Chat: Strategies For Secure Deployment Of AI In Coding | Pieter Danhieux is the Co-Founder and Chairman/CEO of Secure Code Warrior. |
| Jun 8, 2023 | Supply Chain Security: Chainloop. краткий обзор решения | Привет! Меня зовут Михаил Черешнев, я работаю в компании Swordfish Security, где занимаюсь вопросами внедрения DevSecOps. Сегодня мы в команде много внимания уделяем направлению Software supply chain security. Если заглянуть в Рунет, можно ... |
| May 17, 2023 | Kubernetes and sigstore founders raise $17.5M to launch software supply chain startup Stacklok | After being instrumental in launching the Kubernetes open source project, Kubernetes co-founders Craig McLuckie and Joe Beda left Google to launch Heptio in 2016. They then sold the company to VMware in 2018. Both left VMware in 2022 and Mc... |
| Mar 27, 2023 | Двадцать пять лет curl | Когда жить интересно, время летит незаметно. 20 марта curl исполнилось 25 лет.
Проект curl начался очень скромно: это был небольшой переименованный инструмент передачи URL, о котором почти никто не знал в первые годы его существования.
▍ Я ... |
| Mar 27, 2023 | Двадцать пять лет curl | Когда жить интересно, время летит незаметно. 20 марта curl исполнилось 25 лет.
Проект curl начался очень скромно: это был небольшой переименованный инструмент передачи URL, о котором почти никто не знал в первые годы его существования.
▍ Я ... |
| Feb 17, 2023 | Google Cloud CISO Phil Venables: Zero trust ‘essential’ to protect the cloud | Cybersecurity is a tough game. With a bleak economic outlook for 2023, security teams are under increasing pressure to secure complex cloud environments against financially and politically motivated threat actors looking to capitalize on an... |
| Jan 12, 2023 | AWS security heads offer top cybersecurity predictions for 2023 | Check out all the on-demand sessions from the Intelligent Security Summit here.
Last year (2022) was an unprecedented one for cybersecurity, in both good and bad ways. On the positive side, we saw increased use of passwordless and multifact... |
| Dec 14, 2022 | Open-source security successes, learnings and new money reported by OpenSSF’s Alpha-Omega | Check out all the on-demand sessions from the Intelligent Security Summit here.
Open-source security has taken multiple steps forward in 2022, thanks in no small part to multiple efforts led by the Open Source Security Foundation, aka OpenS... |
| Dec 2, 2022 | A new year, new cyberthreats, methods, protections | Check out the on-demand sessions from the Low-Code/No-Code Summit to learn how to successfully innovate and achieve efficiency by upskilling and scaling citizen developers. Watch now.
Don’t slouch on cybersecurity posture: Experts warn that... |
| Nov 10, 2022 | The Securing Open Source Software Act Is Good, but Whatever Happened to Legal Liability? | Editor's note: A previous version of this article identified the OpenSSL vulnerability as critical. While it was initially announced as such, the vulnerability has been reclassified to high, and the editor has corrected the article to refle... |
| Oct 27, 2022 | Critical zero-day bug, first since Heartbleed, identified in OpenSSL | The team maintaining OpenSSL, the cryptographic library that secures almost all traffic on the Internet, have revealed the presence of a critical zero-day vulnerability in later versions of the software.
OpenSSL 3.0.7, to be released on 1st... |
| Oct 26, 2022 | Sigstore launches free software signing and verification service for open source projects | Software supply chain quickly became a hot topic in the last few years, especially as the number of high-profile attacks increased and the White House got involved. Sigstore, an open source project supported by the likes of Google, GitHub, ... |
| Oct 19, 2022 | Google’s Software Delivery Shield Promises End-To-End Security Of Sofware Supply Chain | At the Google Cloud Next conference, Google announced various services that help developers and operators secure the entire software supply chain. It added additional layers of security to existing services such as Artifact Registry, Cloud ... |
| Sep 14, 2022 | Добровольцы поддерживают критические части опенсорса. Но продолжают выгорать и срываться | За пару десятилетий важность опенсорса (FOSS) кардинально выросла. Сейчас от «любительских» библиотек зачастую зависят важные части инфраструктуры, как в классическом xkcd. И эти проекты неожиданно стали критически важными для индустрии, чт... |
| Sep 13, 2022 | Rust Foundation launches security team with support from OpenSSF and JFrog
Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michae ... | The Rust Foundation, which supports the development of the popular open-source Rust programming language, announced today that it’s establishing a dedicated security team.
The foundation’s security team includes dedicated staff resources en... |
| Sep 2, 2022 | New guidance on software supply chain attacks released | The Linux Foundation's Open Source Security Foundation (OpenSSF) has released a best practices guide for developers using dependences from the package manager npm, and in the same week US security agencies NSA and CISA published their own g... |
| Aug 30, 2022 | Google launches vulnerability reward program to secure open-source software | Were you unable to attend Transform 2022? Check out all of the summit sessions in our on-demand library now! Watch here.
Open source software security is in need of a massive overhaul. So many organizations rely on open source software to f... |
| Aug 18, 2022 | Don’t leave open source open to vulnerabilities | Were you unable to attend Transform 2022? Check out all of the summit sessions in our on-demand library now! Watch here.
Open-source software has become the foundation of the digital economy: Estimates are that it constitutes 70 to 90% of a... |
| Jul 25, 2022 | Open-Source Security: How Digital Infrastructure Is Built on a House of Cards | Open source is free software built collaboratively by a community of developers, often volunteers, for public use. Google, iPhones, the national power grid, surgical operating rooms, baby monitors, and military databases all run on this uni... |
| May 13, 2022 | Open source security plan aims to deliver on development, patching and more | White House officials, The Linux Foundation, OpenSSF and 37 private sector tech companies have announced a 10-point open source and software supply chain mobilization plan and $150 million of funding over two years.
At a summit meeting yest... |
| Apr 25, 2022 | Spotify launches new fund to support independent open source projects | Spotify has announced that it’s launching a Free and Open Source Software Fund to support independent open source projects. The company says the purpose of the fund is to bring attention to independent open source projects and give back to ... |
| Apr 25, 2022 | Spotify Announces €100K Support Fund to Aid Free and Open Source Software Projects | Ryan Epps, Tech Times 25 April 2022, 09:04 pm
Announced on Monday, Apr. 25th, via the company's internal blog, Spotify is setting aside €100,000 for its new support fund entitled Free and Open Source Software Fund (FOSS Fund). The money is ... |
| Apr 22, 2022 | Spotify dances to the open source beat | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Let the OSS Enterprise newsletter guide your open... |
| Mar 6, 2022 | OpenSSF looks to further strengthen supply chain security | As we reported a few weeks ago, OpenSSF in conjunction with the White House and others has launched a 10-point plan and funding with the aim of improving the security of the software supply chain.
OpenSSF has also announced a number of new ... |
| Mar 4, 2022 | New OpenSSF project may finally be doing security right | Image: OpenSSF
Security has always been an unsexy investment that tends to make more sense in hindsight than in planning. More recently, as security breaches have become the daily norm rather than the occasional exception, companies and ope... |
| Mar 1, 2022 | The Open Source Security Foundation gains support from Huawei, Spotify, and 23 new organizations | Join today's leading executives online at the Data Summit on March 9th. Register here.
Let the OSS Enterprise newsletter guide your open source journey. Sign up here.
The Open Source Security Foundation (OpenSSF), a pan-industry effort laun... |
| Mar 1, 2022 | The Open Source Security Foundation gains support from Huawei, Spotify, and 23 new members | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Let the OSS Enterprise newsletter guide your open... |
| Feb 24, 2022 | Linux Foundation запускает инициативу по повышению безопасности критически важных приложений с открытым кодом | Linux Foundation запускает проект Alpha Omega — новую инициативу по усилению безопасности критически важных приложений с открытым исходным кодом. В него вложатся, в том числе, Microsoft и Google. Первоначальные инвестиции оценили в $5 млн.
... |
| Feb 1, 2022 | Google and Microsoft back the Alpha-Omega Project to bolster software supply chain | Let the OSS Enterprise newsletter guide your open source journey! Sign up here.
The Open Source Security Foundation (OpenSSF) backed by Linux has launched a new project designed to secure the software supply chain.
The organization’s Alpha-... |
| Feb 1, 2022 | Google and Microsoft back the Alpha-Omega Project to bolster software supply chain | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Let the OSS Enterprise newsletter guide your open... |
| Jan 31, 2022 | Success of web3 hinges on remedying its security challenges | Wei Lien Dang Contributor
Share on Twitter
Wei Lien Dang is a general partner at Unusual Ventures, leading investments in security, infrastructure software and developer tools. He was previously co-founder of StackRox, a cloud-native securi... |
| Jan 25, 2022 | Снижение рисков безопасности в open-source проектах с GitHub Actions и OpenSSF Scorecards V4 | Здесь и далее мой вольный перевод статьи из GitHub Blog: Reducing security risk in open source software.
GitHub стремится обеспечить безопасность для open-source и поэтому мы (GitHub) продолжаем сотрудничать с коллегами из Open Source Secur... |
| Jan 14, 2022 | Código aberto vira assunto de segurança nacional, e Google quer ajudar | Em um mundo ideal, todos os softwares de código-fonte aberto seriam permanentemente revisados para prevenir falhas de segurança. Mas a realidade é diferente, tanto que o assunto chamou a atenção do governo dos Estados Unidos: depois de uma ... |
| Jan 11, 2022 | IT Leaders: Pay Attention To These 8 Security Megatrends In 2022 | These aren’t just transient issues to be ignored once 2023 rolls around—they guide the development of cloud security and technology, and will continue to do so for the foreseeable future. |
| Dec 28, 2021 | Open source security leader Brian Behlendorf discusses the impact of Log4j | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
For the last few weeks, the world of computer sec... |
| Dec 28, 2021 | Open source security leader Brian Behlendorf discusses the impact of Log4j | Hear from CIOs, CTOs, and other C-level and senior execs on data and AI strategies at the Future of Work Summit this January 12, 2022. Learn more
For the last few weeks, the world of computer security has been turned upside down as teams st... |
| Oct 15, 2021 | OpenSSF: Tackling Software Security with an Ecosystem Approach | Description of icon when needed6 Min Read
Security - it's a tough problem to solve, for the problem never stops changing. Today, there's a potential threat in the network APIs; tomorrow it's in the distributed application workloads. Next we... |
| Oct 13, 2021 | Tech giants commit $10M annually to Open Source Security Foundation | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Let the OSS Enterprise newsletter guide your open... |
| Oct 13, 2021 | Tech giants commit $10M annually to Open Source Security Foundation | The Transform Technology Summits start October 13th with Low-Code/No Code: Enabling Enterprise Agility. Register now!
Let the OSS Enterprise newsletter guide your open source journey! Sign up here.
The Linux Foundation has received a $10 mi... |
| Sep 28, 2021 | Вы используете больше Open Source-софта, чем думаете | Прим. перев.: оригинал этой статьи был опубликован минувшим летом в рамках проекта ReadME. Он создан в GitHub с целью стать своеобразной трибуной для многочисленных Open Source-разработчиков, предоставив им возможность поделиться с широким ... |
| Aug 27, 2021 | Top Tech Giants Pledge Billions Towards Cybersecurity | Microsoft, Google, IBM and many other huge tech companies have announced their plans to help improve and maintain online security for residents, organizations, and government agencies in the US.
The reveals come in the wake of a White House... |
| Aug 11, 2021 | OpenSFF’s Allstar aims to fix vulnerabilities in open source projects | All the sessions from Transform 2021 are available on-demand now. Watch now.
Let the OSS Enterprise newsletter guide your open source journey! Sign up here
GitHub and Google today announced the launch of Allstar, an app that provides automa... |
| Aug 11, 2021 | OpenSSF’s Allstar aims to fix vulnerabilities in open source projects | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Let the OSS Enterprise newsletter guide your open... |
| Jul 22, 2021 | Tracking The Trail Of Software: The Key To Boosting Security | Don’t fall prey to cyberattacks. Secure your software trail. |
| Jul 1, 2021 | Google-backed Scorecards bolsters open source security metrics with new checks | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
Let the OSS Enterprise newsletter guide your open... |
| Jul 1, 2021 | Google-backed Scorecards bolsters open source security metrics with new checks | Where does your enterprise stand on the AI adoption curve? Take our AI survey to find out.
Let the OSS Enterprise newsletter guide your open source journey! Sign up here.
Google and its co-members at the Open Source Security Foundation (Ope... |
| Feb 24, 2021 | Google invests in open source security by funding Linux kernel developers | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
In a nod to the growing importance of open source... |
| Feb 24, 2021 | Google invests in open source security by funding Linux kernel developers | In a nod to the growing importance of open source software, Google today announced that it will underwrite the salaries for two developers who will focus on Linux’s fundamental security.
The gesture may seem limited, but Google believes tar... |
| Dec 8, 2020 | Open source developers spend less than three percent of their time on security | The latest FOSS (Free and Open Source Software) contributor survey from the Open Source Security Foundation (OpenSSF) and the Laboratory for Innovation Science at Harvard shows respondents spend on average, just 2.27 percent of their total ... |
| Nov 10, 2020 | Developers: This is Google’s new idea for keeping your open-source projects secure | This new system is intended to help developers assess the risk level of a software package.
Image: iStock
Introducing unknown code into a software can be risky, which is why Google is introducing a new scorecard system to help developers as... |
| Aug 4, 2020 | Microsoft, Google, IBM, GitHub создали организацию в поддержку безопасности опенсорсного софта | Александра Кукуть 4 августа 2020, 12:51 Microsoft, Google, IBM, GitHub создали организацию в поддержку безопасности опенсорсного софта
Ряд крупных технологических компаний учредили организацию Open Source Security Foundation (OpenSSF), пере... |
| Aug 4, 2020 | Microsoft, Google and IBM Among First Members of Open Source Security Group | News Microsoft, Google and IBM Among First Members of Open Source Security Group By Kurt MackieAugust 04, 2020
Microsoft has joined a high-powered group of tech giants in a new industry foundation aimed at improving the security of open sou... |
| Aug 4, 2020 | Microsoft, Google and IBM Among First Members of Open Source Security Group | News Microsoft, Google and IBM Among First Members of Open Source Security Group By Kurt MackieAugust 04, 2020
Microsoft has joined a high-powered group of tech giants in a new industry foundation aimed at improving the security of open sou... |
| Aug 3, 2020 | The Linux Foundation aims to improve open source software security | Open source software has become commonplace in all sorts of environments. But its very nature means that those responsible for their users' or organization's security need to be able to understand and verify its security.
Today The Linux Fo... |
| Aug 3, 2020 | The Linux Foundation announces collective to enhance open source software security | Image: Getty Images/iStockphoto
Open-source code has become integral for global organizations across. In 2019, Red Hat’s initial State of Enterprise Open Source survey found that 69% of IT professionals surveyed believed open-source softwar... |
| Поговорим про безопасность в Dart и Flutter | Безопасность приложения определяется всеми уровнями - от операционной системы и компилятора до используемых пакетов/плагинов и кода самого приложения. Особенно этот вопрос актуален, когда значительная часть используемых компонентов поддержи... |