open source

Kali Linux evolution: What’s next for the open source pentesting Linux distro?

March 2, 2020

When the popular security-focused BackTrack Linux distribution was redesigned from the ground up and given the name Kali Linux nearly seven years ago, I remember thinking that …

A new RCE in OpenSMTPD’s default install, patch available

February 25, 2020

Less than a month after the patching of a critical RCE flaw in OpenSMTPD, OpenBSD’s mail server, comes another call to upgrade to the latest version, as two additional …

OpenDXL Ontology: An open source language for connecting cybersecurity tools

February 24, 2020

The Open Cybersecurity Alliance (OCA) today announced the availability of OpenDXL Ontology, the first open source language for connecting cybersecurity tools through a common …

USB armory Mk II: A secure computer on a USB stick featuring open source hardware design

February 5, 2020

The hardware security professionals at F-Secure have created a new version of the USB armory – a computer on a USB stick built from the ground up to be secure. USB armory Mk …

Make your own security key with Google’s OpenSK

January 31, 2020

Google has open-sourced OpenSK, firmware that, combined with an affordable chip dongle, allows you to make your own security key to use for authentication purposes. About …

Critical RCE flaw in OpenSMTPD, patch available

January 29, 2020

Qualys researchers have discovered a critical vulnerability (CVE-2020-7247) in OpenBSD’s OpenSMTPD mail server, which can allow attackers to execute arbitrary shell commands …

Kali Linux 2020.1 released: New tools, Kali NetHunter rootless, and more!

January 29, 2020

Offensive Security have released Kali Linux 2020.1, which is available for immediate download. Kali Linux 2020.1 key new features The popular open source project, which is …

How to detect and prevent issues with vulnerable LoRaWAN networks

January 28, 2020

IOActive researchers found that the LoRaWAN protocol – which is used across the globe to transmit data to and from IoT devices in smart cities, Industrial IoT, smart homes, …

Container security requires continuous security in new DevSecOps models

January 22, 2020

When Jordan Liggitt at Google posted details of a serious Kubernetes vulnerability in November 2018, it was a wake-up call for security teams ignoring the risks that came with …

Microsoft Application Inspector: Check open source components for unwanted features

January 17, 2020

Want to know what’s in an open source software component before you use it? Microsoft Application Inspector will tell you what it does and spots potentially unwanted …

Kubernetes bug bounty program open to anyone, rewards up to $10,000

January 15, 2020

The Cloud Native Computing Foundation is inviting bug hunters to search for and report vulnerabilities affecting Kubernetes. Offered bug bounties range between $100 to …

CrackQ: Efficient password cracking for pentesters and red teamers

December 4, 2019

CrackQ employs automation to make password cracking a faster and more efficient undertaking for pentesters and red teamers. CrackQ dashboard “Regular security testing is …