Introduced last year with the Linux 6.7 kernel was a hardening configuration to allow for 'make hardening.config' as an easy way of building a security-hardened Linux kernel with sane defaults
Red Hat's Richard Hughes has released Fwupd 1.9.12 as the newest update to this open-source firmware updating solution that is developed along with the Linux Vendor Firmware Service (LVFS) for simplifying system firmware and peripheral/device firmware updates under Linux.
With Linux 6.6, the mainline kernel finally landed support for Shadow Stack on Intel/AMD CPUs that was originally rolled out as part of Intel's Control-flow Enforcement Technology (CET) for better fending off ROP attacks
The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.