Open Source
Open Source | News, how-tos, features, reviews, and videos
Red Hat debuts edge features for Linux, Kubernetes platform security
At its annual Summit event, Red Hat is rolling out new edge-computing features for the company’s well-known enterprise Linux distribution, and security features for its Advanced Cluster Security for Kubernetes platform.
Fuzzing tool company launches initiative to secure open-source software
ForAllSecure offers to pay developers to use its software to eliminate exploits in their code.
Comcast open-sources xGitGuard code protection tool
The new code monitoring tool is designed to keep open source and proprietary code separate and secure.
Drop the SBOM
Software bills of material are having a moment, but the costs of an externally visible SBOM are likely to outweigh the benefits, says Andy Ellis.
Alpha-Omega Project takes a human-centered approach to open-source software security
The Linux Foundation and OpenSSF project, with backing from Microsoft and Google, aims to improve security of 10,000 open-source projects.
![Hands are stacked together in unity and trust. [colleagues / teamwork / collaboration]](https://images.idgesg.net/images/article/2020/09/all_hands_in_stacked_together_in_unity_and_trust_during_meeting_colleagues_teamwork_collaboration_by_jonathan_erasmus_gettyimages-1199216681_2400x1600-100858476-small.3x2.jpg?auto=webp&quality=85,70)
Tech sector embraces public-private collaboration on open-source software security
Participants in a White House meeting on securing open-source software expressed optimism for working effectively with government to help prevent Log4j-like events.
15 top open-source intelligence tools
OSINT (open-source intelligence) is the practice of collecting information from published or otherwise publicly available sources. These tools will help you find sensitive public info before bad guys do.
15 open source GitHub projects for security pros
GitHub has a ton of open-source options for security professionals, with new entries every day. Add these tools to your collection and work smarter.
21 best free security tools
Check out these free, standout software tools that will make your daily security work easier, whether it's pen-testing, OSINT, vulnerability assessment, and more.
PHP backdoor attempt shows need for better code authenticity verification
Attackers were able to place malicious code in the PHP central code repository by impersonating key developers, forcing changes to the PHP Group's infrastructure.
New free software signing service aims to strengthen open-source ecosystem
The Linux Foundation's sigstore code-signing software, developed with Google, Red Hat and Purdue University, will help prevent attacks on the software supply chain.
Dependency confusion explained: Another risk when using open-source repositories
Dependency confusion is a newly discovered logic flaw in the default way software development tools pull third-party packages from public and private repositories. Here's what you need to know.
Using open source for identity projects: 8 considerations
Consider these eight points to decide whether you can securely use open-source code in your identity management projects.
4 best practices to avoid vulnerabilities in open-source code
Open-source code in public repositories might contain malware or unintentional vulnerabilities. Here's how to best manage finding and mitigating potential problems.
Tech Primer
What it takes to become an information assurance analyst
This in-demand role calls for a rare combination of superior communication skills and security chops. Learn how one information assurance analyst landed his current job, the skills and training that helped him get there, and where his...
Tech Primer
Fraud prevention: Improving internal controls
Internal fraud controls aren't fire-and-forget. Smart collaboration and ongoing improvement will help keep fraud in check. Here are the basics.
Tech Primer
How to write an information security policy
Learn the critical first step, why consensus is key, what to cover and how make your information security policy — and program — effective.
Tech Primer