Stay updated with breaking news from Github Security Lab. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
A vulnerability in Polkit's pkexec component identified as CVE-2021-4034 (PwnKit) is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system, researchers warn today.
Recent cybersecurity threats such as Log4Shell have sparked interest in public-private partnerships to secure open-source software.
The vulnerability research ecosystem contains many different actors, all with different motivations, ranging from commercial to altruistic to everything in between. Effectively and consistently interacting with the security community can prove challenging. Through the GitHub Security Lab (disclosure: I am a GitHub employee), we've observed many different approaches to receiving and triaging vulnerability reports, ranging from casual email interactions to fully ticketed bug tracking systems. I'll break down the vulnerability report pipeline into five major steps that make for an effective an...
Citi "Working with the open source community is a key component in our security strategy, and we look forward to supporting the OpenSSF in its commitment to collaboration," said Jonathan Meadows, Citi's Managing Director for Cloud Security Engineering. Comcast "Open source software is a valuable resource in our ongoing work to create and continuously evolve great products and experiences for our customers, and we know how important it is to build security at every stage of development. We're honored to be part of this effort and look forward to collaborating," said Nithya Ruff, head of Comcas...