Vendors will increasingly be judged not by what they say about their own security but by how much of it they let someone else ...

Passwords, encryption, firewall, debloat, and deletion, all for free.

Prometheus is an open-source monitoring and alerting system built for environments where services change often and failures can spread fast. For security teams and DevOps engineers, it has become a ...

Allama is an open-source security automation platform that lets teams build visual workflows for threat detection and response. It includes integrations with 80+ types of tools and services typical in ...

A new report, "The State of Enterprise Open Source AI," from Anaconda and ETR, suggests the open source movement might be susceptible to some inherent cybersecurity drawbacks, such as use of possibly ...

Open-source code has become a malware vector. For example, by the closest of shaves, an open-source developer discovered that Jia Tan, a chief programmer and maintainer of the Linux xz data ...

Organizations of all sizes need to implement strong security testing throughout the software development lifecycle to combat cyberthreats. The open source community offers many application security ...

SonarSource SA, which does business as Sonar, said today that it has signed a definitive agreement to acquire Tidelift Inc., a provider of services to manage open-source components. Terms weren’t ...

Open source security incidents aren't going away. The reliance on open source software (OSS) increases year-over-year, with more than 95% of all software, including open source, in some capacity. From ...