open source

Open-source tool BlobHunter helps pinpoint public Azure blobs that might contain sensitive files

February 8, 2021

CyberArk researchers have released BlobHunter, an open-source tool organizations can use to discover Azure blobs containing sensitive files they have inadvertently made …

Open-source tool for hardening commonly used HMI/SCADA system

February 5, 2021

Otorio, a provider of OT security and digital risk management solutions, released an open-source tool designed for hardening the security of GE Digital’s CIMPLICITY, one …

AlmaLinux Beta released, the CentOS replacement is ready for testing

February 2, 2021

AlmaLinux, the open source enterprise-level Linux distribution created as an alternative to CentOS, is released in beta with most RHEL packages and is ready for community …

“Serious” vulnerability found in Libgcrypt, GnuPG’s cryptographic library

January 29, 2021

Libgcrypt 1.9.0, the newest version of a cryptographic library integrated in the GNU Privacy Guard (GnuPG) free encryption software, has a “severe” security …

Dnsmasq vulnerabilities open networking devices, Linux distros to DNS cache poisoning

January 19, 2021

Seven vulnerabilities affecting Dnsmasq, a caching DNS and DHCP server used in a variety of networking devices and Linux distributions, could be leveraged to mount DNS cache …

Script for detecting vulnerable TCP/IP stacks released

December 21, 2020

Just as ICS-CERT published a new advisory detailing four new vulnerabilities in the Treck TCP/IP stack, Forescout released an open-source tool for detecting whether a network …

Vulnerable TCP/IP stacks open millions of IoT and OT devices to attack

December 9, 2020

Forescout researchers have discovered 33 vulnerabilities affecting four open source TCP/IP (communications) stacks used in millions of connected devices worldwide. …

Open source contributors spending no time on security

December 9, 2020

The Linux Foundation’s Open Source Security Foundation (OpenSSF) and the Laboratory for Innovation Science at Harvard (LISH) announced the release of a report which details …

Open source vulnerabilities go undetected for over four years

December 3, 2020

For its annual State of the Octoverse report, GitHub has analyzed over 45,000 active code directories to provide insight into open source security (vulnerabilities) and …

Financial services lead when it comes to fixing open source flaws

November 20, 2020

The financial services industry has the best flaw fix rate across six industries and leads a majority of industries in uncovering flaws within open source components, Veracode …

Kali Linux 2020.4 released: New default shell, fresh tools, and more!

November 18, 2020

Offensive Security has released Kali Linux 2020.4, the latest version of its popular open source penetration testing platform. You can download it or upgrade to it. Kali Linux …

Pktvisor: Open source tool for network visibility

October 30, 2020

NS1 announced that pktvisor, a lightweight, open source tool for real-time network visibility, is available on GitHub. The importance of applications and digital services has …