open source

Tython: Open-source Security as Code framework and SDK

May 3, 2023

Development teams utilize automation through Infrastructure as Code (IaC) to facilitate rapid and frequent changes to their cloud-native architectures. Security teams must …

GitHub introduces private vulnerability reporting for open source repositories

April 27, 2023

GitHub has announced that its private vulnerability reporting feature for open source repositories is now available to all project owners. General availability The private …

The double-edged sword of open-source software

April 25, 2023

The lack of visibility into the software supply chain creates an unsustainable cycle of discovering vulnerabilities and weaknesses in software and IT systems, overwhelming …

Security beyond software: The open source hardware security evolution

April 19, 2023

Mention IT security, and most people immediately think of software-based protections against software-based threats: ransomware, viruses, and other forms of malware. But …

Implementing a zero-trust system that uses workload identity across a service mesh in Kubernetes

April 18, 2023

In this Help Net Security video, Michael Peters, Principal Software Engineer at Red Hat, discusses how to implement a zero-trust system that uses workload identity across a …

Google delivers secure open source software packages

April 13, 2023

Google has announced the Google Cloud Assured Open Source Software (Assured OSS) service, which aims to be a trusted source of secure open source packages, and the deps.dev …

Kodi forum breach: User data, encrypted passwords grabbed

April 12, 2023

The developers of Kodi, the widely used open-source media player app, have revealed a data breach of its user forum. What happened? The breach did not happen due to a …

Flood of malicious packages results in NPM registry DoS

April 5, 2023

Attackers are exploiting the good reputation and “openness” of the popular public JavaScript software registry NPM to deliver malware and scams, but are also …

Passbolt: Open-source password manager for security-conscious organizations

April 3, 2023

In this Help Net Security interview, Kevin Muller, CEO at Passbolt, delves into the critical concerns linked to password usage, outlines how the Passbolt password manager …

OSC&R open software supply chain attack framework now on GitHub

March 31, 2023

OSC&R (Open Software Supply Chain Attack Reference) is an open framework for understanding and evaluating software supply chain security threats. It has received the …

A bug revealed ChatGPT users’ chat history, personal and billing data

March 27, 2023

A vulnerability in the redis-py open-source library was at the root of last week’s ChatGPT data leak, OpenAI has confirmed. Not only were some ChatGPT users able to see …

GNOME 44 features improved settings panels for Device Security

March 22, 2023

GNOME 44, code-named Kuala Lumpur, is now available. The GNOME Circle now includes many new apps, and both the Software and Files apps have undergone enhancements. The new …