Stay updated with breaking news from Google Open Source Security Team. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
It is only a couple of weeks since the debut of the Microsoft AI Bounty Program, and now Google has launched its own bug bounty program specific to generative AI.
The Malicious Packages repository acts as a public database where reports of malicious packages are stored.
Announcing a new, more secure way to publish to PyPI
/PRNewswire/ -- The Open Source Security Foundation (OpenSSF) is proud to announce the release of version 1.0 of Supply-chain Levels for Software Artifacts...
SLSA v1.0 has been designed to make the software supply chain security framework more accessible and specific to areas of the software delivery lifecycle.