Stay updated with breaking news from Open Source Security. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Slashdot reader sleeping cat shares a recent FOSDEM talk by a compiler engineer on the team building Rust-GCC, "an alternative compiler implementation for the Rust programming language." "If gccrs interprets a program differently from rustc, this is considered a bug," explains the project's FAQ o...
Holes in open source software, ransomware gang tries to evade cyber insurers and more Welcome to Cyber Security Today. It's Friday, February 24th, 2023. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com and TechNewsday.com in the U.S. Creators of open-source projects still aren't doing enough to ensure their code is squeaky clean. Researchers at
Synopsys said in its annual Open Source Security and Risks Analysis (OSSRA) that among the 1,703 codebases across 17 industries examined in 2022, 84% of codebases contained at least one known open source vulnerability, and nearly half (48%) of those were considered high-risk.
A new study, based on the results of more than 1,700 audits of commercial and proprietary codebases involved in merger and acquisition transactions, finds 84 percent contain at least one known open source vulnerability, an increase of almost four percent from last year.
Can organisations establish a strategy to address risk stemming from new security disclosures like Log4Shell. The 2023 OSSRA report findings underscore the reality of open source as the underlying... | February 22, 2023