Source Security Foundation Open News Today

The Siren email mailing list will focus on operational impact and response and act as a central location to provide information about threats and necessary post-disclosure activities.

For the first time, an open-source maintainer put malware into a key Linux utility. We're still not sure who or why - but here's what you can do about it.

Arnaud Le Hors, a Senior Technical Staff Member at IBM, sheds light on the pivotal role of open-source software in modern software development, underscoring its ubiquitous presence across a myriad of applications. "Open source has evolved from being a mere component to a foundational pillar of the software supply chain.

The Open Source Security Foundation (OpenSSF) released the annual report for its Alpha-Omega project, highlighting its ongoing efforts to bolster open-source software security.

Announcing Google Cloud’s new Assured Open Source Software Service, which can help organizations add the same software that Google uses into their own workflows.

Press Release Kusari, a software supply chain security startup, today announced it raised $8 million through combined investments in Pre-Seed and Seed Round funding. The Seed Round was led by J2 Ventures and co-led by Glasswing Ventures with participation from Unusual…

The published version of Forbes’ CIO newsletter delivers the latest news for chief innovation officers and other technology-focused leaders to inboxes every Thursday.

2023 has been the year for regulators to really get their teeth into the blight of security issues that continues to plague the open source community. Last month, nearly 100 government officials and private sector executives convened in a two-day summit hosted by the Open Source Security Foundation (OpenSSF) to discuss and draft a new

A security layer for Git repositories.

The Malicious Packages repository acts as a public database where reports of malicious packages are stored.