OpenAI is attempting to tackle the security issues of the open source software community.

Chainguard's new Athena coalition uses AI to fix open-source flaws - before attackers exploit them ...

Patch the Planet’ pairs automated analysis with expert review to uncover and remediate vulnerabilities in core infrastructure ...

Cold War Assault Remastered has a demo on Steam, which is also open source and acts as a an official asset pack for the full ...

A daily digest at the press of a button.

F5 fixes CVE-2026-42530 and CVE-2026-42055 in NGINX Open Source, addressing HTTP/3 and HTTP/2 flaws that could allow remote ...

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain ...

Commercial open source is often framed in the wrong way. On one side, you have people who treat open source as a moral commitment that becomes compromised the moment money enters the picture. On the ...

Booz Allen report warns Chinese AI models like DeepSeek and Qwen may produce more vulnerable code for U.S. government users, ...

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

Hannah Dacayanan of UnitedLex discusses ways in which automated software composition analysis tools identify open source ...

NHS England is pulling its open-source software from the internet because of fears around computer-hacking AI models like Mythos. Opposition is growing among those who say the move is bad for ...