open source

Meet the new generation of white hats

March 18, 2019

The past two years have seen an explosion in the number of software vulnerabilities being published, jumping from 6,447 in 2016 to 14,714 in 2017. Seeing as 2018 beat out the …

NSA unveils Ghidra reverse engineering tool at RSA Conference 2019

March 6, 2019

The National Security Agency (NSA) has released Ghidra, a free and cross-platform software reverse engineering tool suite used internally by the intelligence agency. They are …

OSSPatcher: Automated mobile application patching for bugs in open source libraries

February 26, 2019

Researchers from the Georgia Tech and Peking University are working on OSSPatcher, a system for automatic patching of vulnerable open source libraries included in mobile …

Building security into cloud native apps with NGINX

February 19, 2019

Companies like Airbnb, Uber and DoorDash, which have a cloud-based software infrastructure as one of their main enablers, are disrupting the hospitality, transportation and …

Malicious macros can trigger RCE in LibreOffice, OpenOffice

February 7, 2019

Achieving remote code execution on systems running LibreOffice or Apache OpenOffice might be as easy as tricking users into opening a malicious ODT (OpenDocument) file and …

Companies getting serious about AI and analytics, 58% are evaluating data science platforms

February 1, 2019

New O’Reilly research found that 58 percent of today’s companies are either building or evaluating data science platforms – which are essential for companies that are …

EU launches bug bounties on free and open source software

January 7, 2019

After setting up a bug bounty program for VLC Media Player in late 2017, the European Commission (EC) has announced the launch of 14 new ones that will cover other free and …

Critical Kubernetes privilege escalation flaw patched, update ASAP!

December 5, 2018

A critical privilege escalation vulnerability affecting the popular open source cluster management and container orchestration software Kubernetes has been patched on Monday. …

For recent big data software vulnerabilities, botnets and coin mining are just the beginning

November 26, 2018

The phrase “with great power comes great responsibility” was excellent advice when Ben Parker said it to his nephew Peter, aka Spiderman. It is even more …

Cybersecurity and ethical data management: Getting it right

November 14, 2018

Data can provide information, information can lead to insight and knowledge, and knowledge is power. It’s no wonder, then, that seemingly everybody in this modern, …

VirtualBox Guest-to-Host escape 0day and exploit released online

November 7, 2018

Independent vulnerability researcher Sergey Zelenyuk has made public a zero-day vulnerability he discovered in VirtualBox, the popular open source virtualization software …

Apache Struts 2.3.x vulnerable to two year old RCE flaw

November 6, 2018

The Apache Software Foundation is urging users that run Apache Struts 2.3.x to update the Commons FileUpload library to close a serious vulnerability that could be exploited …