IBM and Red Hat partner with Deloitte to fix open-source vulnerabilities

Deloitte Touche Tohmatsu Ltd. is joining an initiative that IBM Corp. and its Red Hat unit launched in May to fix open-source ...

Aikido acquires Root to patch open-source software without forced upgrades

Belgian cybersecurity company Aikido Security NV today announced that it has acquired Root.io Inc., a company that offers ...
Decrypt

Linux Foundation, Tech Giants Launch Akrites to Defend Open Source Against AI-Powered Attacks

Akrites is a coalition of 19 organizations, including every major AI lab and Wall Street banks, built to defend open-source ...
SecurityWeek

Linux Foundation Unveils New Open Source Security Project Akrites

The Linux Foundation introduces Akrites, a joint effort to report, fix, and disclose vulnerabilities in open source software.
SecurityWeek

Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Global banks back project to strengthen open source resilience

At the Open Source in Finance Forum, FINOS, the financial services arm of the Linux Foundation, announced its intent to form an Open Source Enterprise Resiliency Alliance (OSERA), a global, ...
eWeek

OpenAI’s Patch the Planet Aims to Fix Open Source Security

OpenAI’s Patch the Planet pairs Codex Security with Trail of Bits engineers to help open source maintainers validate and fix ...
cryptopolitan

Microsoft, Google patch flaws as Cordyceps spread across open-source repositories

Security researchers at Novee found over 300 exploitable CI/CD workflow chains across repositories belonging to Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. The flaws ...