IBM and Red Hat launch Lightwell to defend open-source code from AI attacks ...

The open-source development ecosystem has experienced a significant rise in malicious software components, putting enterprises on high alert for software supply chain attacks. Malware is infiltrating ...

Insignary Clarity’s patented binary-first platform analyzes what is actually built, shipped, and deployed — including the ...

Two years ago, the joint government-private sector response to the Log4j vulnerability that spawned 800,000 attacks worldwide led to the Enduring Security Framework for federal agencies adopting open ...

Deloitte Touche Tohmatsu Ltd. is joining an initiative that IBM Corp. and its Red Hat unit launched in May to fix open-source ...

When AI-assisted vulnerability discovery makes it dramatically easier to identify weaknesses hidden inside modern dependency ...

In our wider community we are all familiar with the idea of open source software. Many of us run it as our everyday tools, a lot of us release our work under an open source licence, and we have a ...

In 2020, the SolarWinds incident served as a wake-up call for the tech industry, highlighting the urgent need for organizations to refine their response strategies to critical CVEs (common ...

Open source software is the “plumbing” of enterprise software stacks ...

ASWF’s Open Source Days bring together software engineers, developers and anyone else who touches open source software, for two days of presentations, collaboration and networking.  Hosted annually by ...