In February, The Linux Foundation’s Open Source Security Foundation (OpenSSF) initiated the Open Source Project Security Baseline (OSPS Baseline) to establish minimum security requirements for ...

Caught before it could do widespread damage, the sophisticated vulnerability could have been one of the highest-impact software supply chain breaches to date.

Users and developers have hailed Linux as the operating system that "just works," celebrating it for decades as a symbol of open source strength, speed, ...

Analysis shows most security risk sits in longtail open source images, with 98% of CVEs outside top projects & Critical flaws ...

Armo's open source security project Kubescape is now part of the Cloud Native Computing Foundation's (CNCF) sandbox in an attempt to "become that free, open source, end-to-end security platform," ...

Fulton, Md., July 08, 2025 (GLOBE NEWSWIRE) -- Sonatype ®, the end-to-end software supply chain security company, today released the Q2 2025 edition of its Open Source Malware Index, uncovering 16,279 ...