open source

The pros and cons of using open-source Kubernetes security software

November 21, 2022

Open source tools are a key part of the Kubernetes security environment, with most companies using open source Kubernetes security software, research by ARMO has revealed. In …

ODD Platform: Open-source data discovery and observability

November 18, 2022

Provectus released v0.8 of its Open Data Discovery Platform (ODDP), an open-source platform that helps data-driven enterprises democratize their data. Designed to overcome the …

Open-source tool puts machine learning dataset analysis at data scientists’ fingertips

November 17, 2022

Comet released Kangas, an open-source smart data exploration, analysis and model debugging tool for machine learning. Kangas, available on GitHub, helps users understand and …

Critical vulnerability in Spotify’s Backstage discovered, patched

November 15, 2022

A critical unauthenticated remote code execution vulnerability in Spotify’s Backstage project has been found and fixed, and developers are advised to take immediate action in …

Open-source software fosters innovation, but only with the right controls in place

November 3, 2022

In businesses of all sizes, open-source software is a crucial component of the software supply chain, but the OSS supply chain is also facing new security issues – calling for …

Following Log4j: Supporting the developer community to secure IT

November 1, 2022

How bad was the Log4j vulnerability for open source’s reputation? One of the most high-profile exploits in recent years, it even led to a government advisory from the UK’s …

Ghostwriter: Open-source project management platform for pentesters

October 27, 2022

In this Help Net Security video, Christopher Maddalena, Director of Internal and Community Product at SpecterOps, showcases Ghostwriter, which helps you manage clients, …

MyOpenVDP: Open-source web application to securely disclose vulnerabilities

October 26, 2022

MyOpenVDP is a turnkey open-source solution allowing anyone to host their own vulnerability disclosure policy (VDP). Developed by YesWeHack, the web application is available …

What closed-source software developers can learn from their open-source counterparts

October 25, 2022

Open-source software has reached greater levels of security than ever before, but its increased adoption comes with new challenges. In this Help Net Security video, Josep …

cert-manager: Automatically provision and manage TLS certificates in Kubernetes

October 24, 2022

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters and simplifies the process of obtaining, renewing, and using those …

Apache Commons Text flaw is not a repeat of Log4Shell (CVE-2022-42889)

October 19, 2022

A freshly fixed vulnerability (CVE-2022-42889) in the Apache Commons Text library has been getting attention from security researchers these last few days, worrying it could …

Secure portable operating system Tails 5.5 released