open source

Google delivers secure open source software packages

April 13, 2023

Google has announced the Google Cloud Assured Open Source Software (Assured OSS) service, which aims to be a trusted source of secure open source packages, and the deps.dev …

Kodi forum breach: User data, encrypted passwords grabbed

April 12, 2023

The developers of Kodi, the widely used open-source media player app, have revealed a data breach of its user forum. What happened? The breach did not happen due to a …

Flood of malicious packages results in NPM registry DoS

April 5, 2023

Attackers are exploiting the good reputation and “openness” of the popular public JavaScript software registry NPM to deliver malware and scams, but are also …

Passbolt: Open-source password manager for security-conscious organizations

April 3, 2023

In this Help Net Security interview, Kevin Muller, CEO at Passbolt, delves into the critical concerns linked to password usage, outlines how the Passbolt password manager …

OSC&R open software supply chain attack framework now on GitHub

March 31, 2023

OSC&R (Open Software Supply Chain Attack Reference) is an open framework for understanding and evaluating software supply chain security threats. It has received the …

A bug revealed ChatGPT users’ chat history, personal and billing data

March 27, 2023

A vulnerability in the redis-py open-source library was at the root of last week’s ChatGPT data leak, OpenAI has confirmed. Not only were some ChatGPT users able to see …

GNOME 44 features improved settings panels for Device Security

March 22, 2023

GNOME 44, code-named Kuala Lumpur, is now available. The GNOME Circle now includes many new apps, and both the Software and Files apps have undergone enhancements. The new …

Amazon Linux 2023: Create and execute cloud-based applications with enhanced security

March 16, 2023

AWS has been offering Amazon Linux, a cloud-optimized Linux distribution, since 2010. This distribution’s latest version is now available. Amazon Linux 2023 is provided …

We can’t wait for SBOMs to be demanded by regulation

March 14, 2023

Old ads can be startling—cigarette ads used to boast their health-giving properties, sugar-laden candy was once advertised as a dietary aid, and soft drinks were advertised as …

Kali Linux 2023.1 released – and so is Kali Purple!

March 13, 2023

OffSec (formerly Offensive Security) has released Kali Linux 2023.1, the latest version of its popular penetration testing and digital forensics platform, and the release is …

5 open source Burp Suite penetration testing extensions you should check out

March 1, 2023

When it comes to assessing the security of computer systems, penetration testing tools are critical for identifying vulnerabilities that attackers may exploit. Among these …

Researchers find hidden vulnerabilities in hundreds of Docker containers

February 23, 2023

Rezilion uncovered the presence of hundreds of Docker container images containing vulnerabilities that are not detected by most standard vulnerability scanners and SCA tools. …