AI has upended the foundation of open source security, and commercial open source applications must close their code to protect sensitive data.

It’s a topic of fierce debate among high-tech cognoscenti: What’s more secure – “open source” code such as Linux and Apache, or proprietary “closed source” operating systems and applications, ...

Open source designs offer flexibility, yet they also create long-term dependency paths that may hide more risk than developers expect. Many companies now treat container security as the first real ...

The Linux Foundation, a nonprofit organization enabling mass innovation through open source, today announced the release of “Census III of Free and Open Source Software—Application Libraries” (Census ...

The proportion of open source codebases with vulnerabilities has continued to remain level over the past two years, but the number of applications with high-risk vulnerabilities has dropped to its ...

'Like handing out the blueprint to a bank vault': Why AI led one company to abandon open source ...

Interest continues to build for creating a safer open source software ecosystem, in part because of the code vulnerability Log4Shell, which one recent report predicts will pose a risk for the next ...

Boost Security has announced SmokedMeat, an open source red team framework for CI/CD pipelines that shows how attackers ...

In the past decade or so, open source software has become a critical component of many companies' tech stacks. The proliferation of cloud computing and artificial intelligence (AI) accelerated this ...

Government interest in open-source software security is on the rise and reflects the scale upon which this code is utilized across all sectors, including critical infrastructure. The widespread usage ...

Top 10 open-source security and operational risks of 2023 Your email has been sent Many software companies rely on open-source code but lack consistency in how they measure and handle risks and ...