NSF said the initial cohort will address critical vulnerabilities in open-source software and its deployment pipelines.

F-Droid says Google's developer registration rule could end its open-source app store and strand users. Google defends ...

An open source software supply-chain vulnerability is an exploitable weakness in trusted software caused by a third-party, ...

Within months of moving to San Francisco, Strix hit number one on Hacker News, earning the attention of developers, ...

The XZ attack is a backdoor that reminds us our biggest open-source security threats are from decades of unlearned lessons.

If you’re the type of Android user who values privacy and open-source software, you’re probably familiar with F-Droid. It’s ...

Learn how DevSecOps shifts security left and right across the software lifecycle and why understanding end-of-life risks is ...

Impact? Nope, don't worry, be happy, says Linux veteran Opinion There has been considerable worry about the impact of the ...

The foundations said in their blog post that automated CI systems, large-scale dependency scanners, and ephemeral container builds operated by companies place “enormous strain on infrastructure” while ...

When Europe's new Cyber Resilience Act (CRA) comes into force, manufacturers will face a challenging but necessary deadline – 24 hours to issue an initial security statement, 72 hours to produce a ...

Daniel Stenberg, president of the European Open Source Academy and founder of cURL, fears the EU's next big budget will ...