Page 7 - Open Source Security News Today

Google last week pledged $1 million in financial support to the Secure Open Source (SOS) rewards program run by the Linux Foundation.

The OSV schema aims to precisely describe vulnerabilities in a way tailored to the open source use case, "with the goal of automating and improving vulnerability triage for developers and users of open source software," Google stated in a blog post published on June 24. The project could allow various developer tools to natively handle vulnerability information and make it easier for users of open source components to know whether particular vulnerabilities affect their applications.  The aim ...

US Supreme Court Rules on Key Software Development Practice Each year for the annual Open Source Security and Risk Analysis report, the authors highlight key aspects around open source that you likely wouldn’t expect. In the 2020 edition, we gave some coverage to the Google LLC v Oracle America, Inc. case before the US Supreme Court. In case you missed it, Oracle sued Google over Google’s use of Java SE API signatures in Android. Android is open source, but a...

2021 State of Open-Source Security Report 2021 State of Open-Source Security Report Open-source libraries help software developers meet aggressive deadlines. As a result, these libraries and their classes continue to proliferate and grow in complexity—increasing the risk they pose while making it more difficult to secure modern applications. The 2021 State of Open-source Security Report uses telemetry from actual applications protected by Contrast OSS and Contrast Assess to reveal key tren...

Contrast Security Study Exposes Significant Time and Resource Drain in Software Supply Chain Security 2021 State of Open-source Security Report From Contrast Labs Reveals That Less Than 10% of Application Code is Active Third-Party Library Code News provided by Share this article Share this article LOS ALTOS, Calif., April 8, 2021 /PRNewswire/ -- A new study by Contrast Security reveals that 62% of libraries found in applications are inactive — that is, are not used at all by the software. Ad...

On Tuesday, March 9, at 11 a.m. PST/2 p.m. EST/7 p.m. GMT, @eWEEKNews will host its 96th monthly #eWEEKChat. The topic will be “What’s Next-Gen in Health Care IT?” It will be moderated by Chris Preimesberger, eWEEK’s Editor in Chief. Some quick facts: Date/time: Tuesday, March 9, 11 a.m. PST/2 p.m. EST/7 p.m. GMT Tweetchat handle: You can use #eWEEKChat to follow/participate via Twitter itself, but it’s easier and more efficient to use the real-time chat room link at C...

Tweetchat handle: You can use #eWEEKChat to follow/participate via Twitter itself, but it’s easier and more efficient to use the real-time chat room link at CrowdChat. Instructions are on that page; log in at the top right, use your Twitter handle to register, and the chat begins promptly at 11am PT. The page will come alive at that time with the real-time discussion. You can join in or simply watch the discussion as it is created. Special thanks to John Furrier of SiliconAngle.com for de...

Omar Santos Omar Santos is an active member of the cybersecurity community, where he leads several industry-wide initiatives. He is the lead of the DEF CON Red Team Village; the chair of the Common Security Advisory Framework (CSAF) technical committee; the co-chair of the Forum of Incident Response and Security Teams (FIRST) Open Source Security working group; and has been the chair of several initiatives in the Industry Consortium for Advancement of Security on the Internet (ICASI). His activ...