Within months of moving to San Francisco, Strix hit number one on Hacker News, earning the attention of developers, ...

An open source software supply-chain vulnerability is an exploitable weakness in trusted software caused by a third-party, ...

F-Droid says Google's developer registration rule could end its open-source app store and strand users. Google defends ...

The XZ attack is a backdoor that reminds us our biggest open-source security threats are from decades of unlearned lessons.

Learn how DevSecOps shifts security left and right across the software lifecycle and why understanding end-of-life risks is ...

If you’re the type of Android user who values privacy and open-source software, you’re probably familiar with F-Droid. It’s ...

The foundations said in their blog post that automated CI systems, large-scale dependency scanners, and ephemeral container builds operated by companies place “enormous strain on infrastructure” while ...

It was this gap that Ahmed Allam saw clearly when he moved from Egypt to San Francisco. With a background in computer science ...

F-Droid is warning that the project could reach an end due to Google's new requirements for all Android developers to verify ...

When Europe's new Cyber Resilience Act (CRA) comes into force, manufacturers will face a challenging but necessary deadline – 24 hours to issue an initial security statement, 72 hours to produce a ...