A threat actor quietly spent the last two years integrating themself in the core team of maintainers of XZ Utils,...more
open source security
Google Offers Bug Bounties for Generative AI Security Vulnerabilities
Google's Vulnerability Reward Program offers up to $31,337 for discovering potential hazards. Google joins OpenAI and Microsoft in rewarding AI...more
Top 10 open-source security and operational risks of 2023
Image: klss777/Adobe Stock Endor Labs, a software firm that facilitates the security and maintenance of open-source software, has released a...more
What is Microsoft’s Secure Supply Chain Consumption Framework, and why should I use it?
Microsoft has open sourced its framework for managing open source in software development. Image: gguy/Adobe Stock Software development isn’t only...more
