Page 2 - Open Source Security News Today

Open Source Security and Risk Analysis report finds widespread use of open source components with high-risk vulnerabilities.

The percentage of codebases with high-risk open source vulnerabilities -- those that have been actively exploited, have documented proof-of-concept exploits or are classified as remote code execution vulnerabilities -- increased from 48 percent in 2022 to 74 percent in 2023, according to new research.

The fuzzing framework uses AI to boost code coverage and to speed up vulnerability discovery.

Bruce Perens (Slashdot reader #3872) co-founded the Open Source Initiative with Eric Raymond in 1998. (And then left it this January 2nd.) But in 2017 Perens was also sued partly over comments made in a Slashdot discussion. Hes just shared a video from the 9th Circuit Appeals Court hearing -- al...

Marta Rybczynska, technical program manager at Eclipse Foundation, elaborates on reporting vulnerabilities, adopting AI, and bridging the gap between developers and

Google expands its bug bounty programme to encompass generative AI and takes steps to grow its commitment to supply chain security as it relates to the emerging technology

It is only a couple of weeks since the debut of the Microsoft AI Bounty Program, and now Google has launched its own bug bounty program specific to generative AI.

Trend Micro’s Zero Day Initiative says Exim zero-days leave organizations open to an remote code execution attack.

The 2023 State of Open Source Security report from Snyk highlights trends in open source code security and the importance of automating code security analysis.

. bank information security