Page 2 - Dan Lorenc News Today

Google's new use of generative AI could boost 'fuzzing,' a longtime cybersecurity defense tool - SiliconANGLE

Self-signed certificates are common within enterprise companies. But how do you distribute them and enable their use in Kubernetes as a user and a vendor?

If ChatGPT is fabricating code libraries or packages, attackers could use these hallucinations to spread malicious packages without using suspicious and already detectable techniques like typosquatting or masquerading.

“Container registries” are ubiquitous software clearinghouses, but they’ve been exposed for years. Chainguard says it now has a solution.

A look inside Project Alpha-Omega: a year-long effort to identify and fix vulnerabilities in thousands of open source projects that quietly power the world's software.

CircleCI revealed in a late Friday update that a breach of their IT systems last December was done through the compromise of an employee's laptop and credentials, both of which were used to steal valuable internal and customer data. The company is now working with multiple third-party providers to rotate secrets, tokens and is aware of "less than five" customers who have reported unauthorized access to their third-party applications following the hack.

This month marks one year since the infamous Apache open source vulnerability was first disclosed. SC Media spoke with security researchers who said that widespread exposure remains rampant as the sky-high costs of detection and remediation start to come into focus.

One year after the Log4j disaster, open source community efforts and new developer toolchains are addressing the challenges of software supply chain security.

One year after the Log4j disaster, open source community efforts and new developer toolchains are addressing the challenges of software supply chain security.

One year after the Log4j disaster, open source community efforts and new developer toolchains are addressing the challenges of software supply chain security.