This new initiative expands the commercial ecosystem around Trivy, the world’s most popular open source vulnerability and misconfiguration scanner. The first two partners to join the program are Echo ...

Due to automation and a high-reward, low-risk threat environment, open source malware increased 188% year over year in the second quarter of this year. Supply-chain security vendor Sonatype today ...

North Korean threat actors have distributed over 200 malicious open source packages, in an audacious new cyber-espionage campaign, according to Sonatype. The security vendor blocked 234 unique npm and ...

Open source components continue to cause huge problems for security practitioners, and AIxCC was created to determine whether automation could help close the gap. At DEF CON 33, DARPA announced the ...

Android privacy risks from daily hacks demand vigilance. Install these 5 open-source apps to stay protected from trackers, ...

The Linux desktop will continue to grow. Linux and open-source security will both improve. Firefox is in deep, deep trouble. Clearly, AI will play a larger role in Linux and open source next year, but ...