Anthropic OSS Scanner, launched October 8, 2026, gives open-source projects free AI-powered vulnerability scanning using ...

Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner . "Projects that join ...

Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure use of open-source software in 2025. Open-source software is common ...

There's a false sense of security around open source code, according to Trustwave researchers Brandon Myers and Assi Barak. Their deeper point was that open source code is prone to vulnerabilities ...

Approximately 66,000 unique entries are expected to emerge in 2026 , many boosted or even created by AI.

SAN FRANCISCO, Feb. 25, 2025 /PRNewswire/ -- The Open Source Security Foundation (OpenSSF) is pleased to announce the initial release of the Open Source Project Security Baseline (OSPS Baseline). The ...

Attackers are increasingly targeting open source projects, seeking to exploit holes in software that millions of organizations rely on as the foundation of their technology stacks. The staggering 280% ...

Amidst ongoing reports of AI agents wreaking havoc on online infrastructure, chipmaker Nvidia is rallying tech companies to use its new open-source tool for AI security. OpenShell, one of the Nvidia’s ...

Two years ago, the joint government-private sector response to the Log4j vulnerability that spawned 800,000 attacks worldwide led to the Enduring Security Framework for federal agencies adopting open ...

Federal agencies can benefit from open source software because its source code can be independently reviewed, reducing reliance on vendor claims. It can reduce dependence on a single supplier, lower ...

Since Russian troops invaded Ukraine more than three years ago, Russian technology companies and executives have been widely sanctioned for supporting the Kremlin. That includes Vladimir Kiriyenko, ...