Armo's open source security project Kubescape is now part of the Cloud Native Computing Foundation's (CNCF) sandbox in an attempt to "become that free, open source, end-to-end security platform," ...
The flaw could allow attackers to bypass Nuclei’s template signature verification process to inject malicious codes into host systems. A widely popular open-source tool, Nuclei, used for scanning ...
Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.
Open-source software has become a prime target in the escalating wave of cybersecurity threats. As attacks grow more sophisticated, the open-source community is racing to close critical security gaps ...
Code quality testing startup SonarSource SA today announced the upcoming release of SonarQube Advanced Security, a new offering that will extend the company’s analysis capabilities beyond first-party ...
Chainguard Inc., a startup that helps developers ensure the open-source code they use is secure, has raised $356 million in fresh funding. The Series D round comes less than a year after the company’s ...
What’s Next for Open Source Software Security in 2025? Your email has been sent Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe ...
NEW CASTLE, DE — KomodoSec has introduced the PowerShell SMB Scanner, a cutting-edge, open-source tool designed to enhance the capabilities of red teams and cybersecurity professionals. This new ...