Open Software Security Foundation News Today

Learn more about Open Source software security and how you can keep yourself safe when using open source applications by using a few guiding

A variety of initiatives — such as memory-safe languages and software bills of materials — promise more secure applications, but sustained improvements will require that vendors do much better, researchers agree.

All the security funding in the world won’t help if users don’t train people to patch software.

All the security funding in the world won’t help if you don’t train your people to patch your software.

Recent vulnerabilities such as Log4j2 have called attention to the challenges of securing open-source software, which is used widely by tech companies and other industry enterprises. Google will release the security-vetted versions of open source software packages that it runs itself for industry and government use.

Google will offer Assured Open Source Software, the open source software it has vetted and uses internally.

The online giant analyzes, patches, and maintains its own versions of open source software, and now the company plans to give others access to its libraries and components as a subscription.

Developers opinions of security and secure coding — calling it a "soul-withering chore" and an "insufferably boring procedural hinderance" —  highlight that companies who want to harden their applications against attacks have a significant gap between those desires and getting their own developers on board, says Frank Nagle, a Harvard Business School professor and contributing author to the report analyzing the survey results. "It appears that this shifting left has not fully pervaded the ...