open source

Open source Sleepy Puppy tool finds XSS bugs in target apps and beyond

September 3, 2015

Since Monday, security pros can add another XSS-finding tool to their arsenal, as Netflix has open sourced their cross-site scripting payload management framework dubbed …

Open source auditing with Lynis

August 26, 2015

Lynis is an open source security auditing tool. Commonly used by system administrators, security professionals and auditors, to evaluate the security defenses of their …

Evaluating the security of open source software

August 20, 2015

The Core Infrastructure Initiative (CII), a project managed by The Linux Foundation, is developing a new free Badge Program, seeking input from the open source community on …

IBM is betting big on open source in the enterprise

August 18, 2015

IBM launched LinuxONE, a new portfolio of hardware, software and services solutions, providing two distinct Linux systems for large enterprises and mid-size businesses.The …

OpenSSH 7.0 deprecates weak, legacy and unsafe cryptography

August 12, 2015

OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other attacks. Additionally, it provides secure tunneling …

Kali Linux 2.0 released: New 4.0 kernel, improved hardware and wireless driver coverage

August 11, 2015

Kali Linux, the open source penetration testing platform, has reached version 2.0.Kali Linux 2.0 comes with a 4.0 kernel, now based on Debian Jessie. It features improved …

Open source tool for deploying SSL public key pinning in iOS, OS X apps

August 4, 2015

At Black Hat USA 2015, Data Theorem and Yahoo! will be unveiling TrustKit, a new, open source security toolkit that helps developers easily include complex mobile security …

Commercial code is more compliant to security standards than open source code

July 30, 2015

A new report details the analysis of nearly 10 billion lines of source code through the Coverity Scan service and usage of the Synopsys Coverity Software Testing Platform.For …

Finally! A free, open source, on-premise virus scanner framework

July 27, 2015

After having spoken about it for quite a while, security researcher Robert Simmons has finally begun publishing the code and documentation of his open source AV scanner …

Severe OpenSSL bug that allows certificate forgery has been plugged

July 9, 2015

The wait is over: the OpenSSL Project has issued security updates for the popular open-source implementation of the SSL and TLS protocols, and has shared some details about …

How you can anonymously use public Wi-Fi from miles afar

July 3, 2015

Benjamin Caudill, founder of Rhino Security Labs, is scheduled to demonstrate at the upcoming DefCon a new device that could help users achieve and maintain their online …

Amazon releases new, easily auditable TLS implementation

July 2, 2015

A new, open source implementation of the TLS encryption protocol has been unveiled by Amazon Web Services.Dubbed s2n (shorthand for “signal to noise”), the library …