Page 3 - Github Security Lab News Today

The GitHub Advisory Database is now open to community contributions to help further the security of open source software.

The world of open source security is fast moving, with new vulnerabilities and different attack vectors driving the community to continuously (...)

Researchers, academics, and enthusiasts can now contribute to and benefit from free, open-source security data on software supply chain vulnerabilities.

SAN FRANCISCO, Feb. 1, 2022 /PRNewswire/ -- Following a meeting with government and industry leaders at the White House, OpenSSF is excited to ann...

/PRNewswire/ -- Following a meeting with government and industry leaders at the White House, OpenSSF is excited to announce the Alpha-Omega Project to improve...

A vulnerability in Polkits pkexec component identified as CVE-2021-4034 (PwnKit) is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system, researchers warn today.

Recent cybersecurity threats such as Log4Shell have sparked interest in public-private partnerships to secure open-source software.

The vulnerability research ecosystem contains many different actors, all with different motivations, ranging from commercial to altruistic to everything in between.  Effectively and consistently interacting with the security community can prove challenging. Through the GitHub Security Lab (disclosure: I am a GitHub employee), weve observed many different approaches to receiving and triaging vulnerability reports, ranging from casual email interactions to fully ticketed bug tracking systems. Il...

Citi "Working with the open source community is a key component in our security strategy, and we look forward to supporting the OpenSSF in its commitment to collaboration," said Jonathan Meadows, Citis Managing Director for Cloud Security Engineering. Comcast "Open source software is a valuable resource in our ongoing work to create and continuously evolve great products and experiences for our customers, and we know how important it is to build security at every stage of development. Were hono...