The Open Source Security Foundation (OpenSSF) has had enough of being the unpaid janitor of the world's software supply chain.… A coalition of heavyweight open source foundations issued a joint ...

Ethereum co-founder Vitalik Buterin has called on governments, corporations, and researchers to adopt open-source and verifiable technology in areas such as healthcare, finance, and governance, ...

Since Russian troops invaded Ukraine more than three years ago, Russian technology companies and executives have been widely sanctioned for supporting the Kremlin. That includes Vladimir Kiriyenko, ...

Open-source software has become a prime target in the escalating wave of cybersecurity threats. As attacks grow more sophisticated, the open-source community is racing to close critical security gaps ...

Open source components continue to cause huge problems for security practitioners, and AIxCC was created to determine whether automation could help close the gap. At DEF CON 33, DARPA announced the ...

The open-source software movement has long been a symbol of global collaboration, transparency and shared progress. Yet, as China rapidly ascends to a leadership position in open source, especially in ...

DevSecOps, short for Development, Security, and Operations, is a methodology that integrates security practices into software Development Operations (DevOps). It emphasizes that security should be a ...

"This is really the foundation of everything we do, and part of this really important foundation is open source technology,” AT&T CTO Andre Fuetsch said. The carrier has invested more than $135 ...

CNCF projects gain access to trusted container distribution, enhanced security tooling, and usage insights via Docker's Sponsored Open Source Program "Docker was a founding member of CNCF, and we've ...

In February, The Linux Foundation’s Open Source Security Foundation (OpenSSF) initiated the Open Source Project Security Baseline (OSPS Baseline) to establish minimum security requirements for ...

Eight organizations that operate the world’s largest software package registries issued a coordinated warning that their current funding model was “dangerously fragile,” signaling potential changes to ...

Generative AI is erasing open source code provenance. FOSS reciprocity collapses when attribution and ownership disappear. The commons that built AI may not survive its success. We live in an ...