A 27-year-old bug sat inside OpenBSD’s TCP stack while auditors reviewed the code, fuzzers ran against it, and the operating system earned its reputation as one of the most security-hardened platforms ...

Chainguard will use AI to protect open-source code. Athena pools open-source users, developers, and maintainers. Others are also using AI to secure open-source code. As Chainguard puts it, "The gap ...

2026 OSSRA report highlights the rapidly expanding attack surface and abrupt rise in open source vulnerabilities and license conflicts in commercial codebases Based on analysis of 947 codebases across ...

The mean number of open-source vulnerabilities per codebase doubled in the past year, according to the annual Black Duck Open Source Software and Risk Analysis (OSSRA) report released Wednesday. The ...

Value stream management involves people in the organization to examine workflows and other processes to ensure they are deriving the maximum value from their efforts while eliminating waste — of ...

The disbelief was palpable when Mozilla’s CTO last month declared that AI-assisted vulnerability detection meant “zero-days are numbered” and “defenders finally have a chance to win, decisively.” ...

Every few weeks, I see the same thing happen. A major AI lab ships a new frontier model, the security industry erupts with headlines about autonomous vulnerability discovery and my inbox fills up with ...

Popular vibe coding platforms consistently generate insecure code in response to common programming prompts, including creating vulnerabilities rated as ‘critical,’ new testing has found. Security ...

The Linux Foundation, the nonprofit organization enabling mass innovation through open source, today announced Akrites, a ...

Summary: Lovable, the $6.6 billion vibe coding platform with eight million users, has faced three documented security incidents exposing source code, database credentials, and thousands of user ...