Open Source Components News Today

Silicon Valley venture capital (VC) juggernaut Sequoia is backing a fledgling Danish startup to build a next-gen software composition analysis (SCA) tool, one that promises to help companies filter through the noise and identify vulnerabilities that are a genuine threat. For context, most software contains at least some open source components, many of which are out-of-date and irregularly -- if at all -- maintained. This has led to all manner of security flaws, such as Log4Shell which impacted...

Virtually every application today relies on dozens -- and sometimes hundreds -- of open-source components. Infield, which is launching its SaaS platform today and announcing $3 million in seed funding, aims to bring open-source dependency management into the future by human-assisted AI to analyze changelogs to give developers the data they need to confidently upgrade their dependencies. The New York-based company was founded Allison and Steve Pike, who first met at alcohol e-commerce service S...

As a part of an ongoing White House initiative to make software more secure, the Defense Advanced Research Projects Agency (DARPA) plans to launch a two-year contest, the AI Cyber Challenge, that'll task competitors with identifying and fixing software vulnerabilities using AI. In collaboration with AI startups Anthropic and OpenAI, as well as Microsoft and Google, the AI Cyber Challenge will have U.S.-based teams compete to best secure "vital software" -- specifically critical i...

Modern software applications contain many complexities that challenge testing requirements and security teams. A variety of elements including custom/proprietary code, open source components, and application configuration pose challenges for independent verification and validation (IV&V) and audit and testing teams. The complexity and high-stakes nature of U.S. Department of Defense requirements and key performance parameters magnify these challenges. A clear understanding of software weaknesse...

Open source components are the backbone of modern software development organizations. As the popularity of open source soars, so too do the vulnerable components. When it comes to using open source components to manufacture modern software, the bottom line is this — complete and precise intelligence is critical. Inaccurate or incomplete data will leave organizations to deal with vulnerabilities, licensing, and other quality issues that lead directly to higher costs and reduced innovation. As ...