open source

WordPress announces bug bounty program

May 17, 2017

WordPress Foundation is the latest organization to publicly announce a bug bounty program set up on the HackerOne platform. What’s in scope of the WordPress bug bounty …

Google found over 1,000 bugs in 47 open source projects

May 9, 2017

In the last five months, Google’s OSS-Fuzz program has unearthed over 1,000 bugs in 47 open source software projects, and it’s ready to integrate even more of …

If you downloaded HandBrake for Mac, you could be infected with Proton RAT

May 8, 2017

A mirror download server of HandBrake, a popular open source video conversion app for Mac, has been compromised, and the legitimate app .dmg file switched with a Trojanized …

Container Health Index: Red Hat’s standard for trusted containers

May 3, 2017

Red Hat introduced the Container Health Index, which provides a comprehensive image detail of any enterprise container service. The index grades all of Red Hat’s containerized …

SquirrelMail opens users to remote code execution

April 25, 2017

Users of open source webmail software SquirrelMail are open to remote code execution due to a bug (CVE-2017-7692) discovered independently by two researchers. “If the …

Top-ranked programming Web tutorials introduce vulnerabilities into software

April 21, 2017

Researchers from several German universities have checked the PHP codebases of over 64,000 projects on GitHub, and found 117 vulnerabilities that they believe have been …

Organizations are not effectively dealing with open source security threats

April 20, 2017

Black Duck conducts hundreds of open source code audits annually, primarily related to Merger & Acquisition transactions. Its Center for Open Source Research & …

Intel’s CHIPSEC can detect CIA’s OS X rootkit

March 13, 2017

As details about CIA’s hacking capabilities and tools are, bit by bit, popping to the surface, companies are trying to offer users some piece of mind. In the wake of …

Apache servers under attack through easily exploitable Struts 2 flaw

March 9, 2017

A critical vulnerability in Apache Struts 2 is being actively and heavily exploited, even though the patch for it has been released on Monday. System administrators are …

Stethoscope spurs employees to implement better security practices

February 22, 2017

Every now and then, Netflix open sources some of the security tools created by its coders. The latest example of this is Stethoscope, a web application that collects …

Secure messaging app Wickr opens core crypto protocol to review

February 16, 2017

Wickr, the San Francisco-based company that’s behind the secure ephemeral messaging app of the same name, has published the core crypto protocol powering both the …

PacketTotal: Free online tool for analyzing packet captures

February 13, 2017

PacketTotal is a free tool for analyzing packet captures that has recently been offered to the infosec community. Available online, the tool is powered by a Python-based …