OpenSSF stories

OpenSSF joins forces with Eclipse Foundation for EU CRA initiative
Fri, 24th May 2024
#
cybersecurity
#
digital infrastructure
#
openssf
The Open Source Security Foundation partners with the Eclipse Foundation and others to shape the EU's Cyber Resilience Act, aiming to enhance software supply chain security.

LF Energy unveils new open source projects for energy transition
Wed, 6th Dec 2023
#
power / energy
#
cybersecurity
#
cleantech
LF Energy introduces five open-source projects for digital energy technologies, bolstering efforts towards energy transition.

OpenSSF announces new members & secure software development principles
Tue, 5th Dec 2023
#
advanced persistent threat protection
#
open source
#
ai
OpenSSF introduces new members including Patchstack and SparkFabrik, and outlines secure software development principles.

Investment in open source to skyrocket in next five years
Tue, 20th Dec 2022
#
supply chain & logistics
#
apm
#
open source
Technology is critical in business, government, social development, and so much more—and open source is all too often at the forefront of what’s next.

2023 to be one of the most challenging years for cybersecurity - Venafi
Wed, 14th Dec 2022
#
ransomware
#
risk & compliance
#
finops
Venafi has released its predictions for the cybersecurity landscape in 2023, indicating that this will be one the most challenging years yet for the industry.

Endor Labs releases report on state of open source security
Tue, 13th Dec 2022
#
supply chain & logistics
#
apm
#
open source
Endor Labs exposes the dangers of unchecked open source software reuse in application development, with 95% of vulnerabilities found in indirect dependencies.

Optus, Medibank – and supply chains flying under the radar
Wed, 7th Dec 2022
#
application security
#
devsecops
#
supply chain & logistics
Software supply chain attacks are becoming the biggest concern in cyber security, with organisations globally at risk.

Significant security concerns resulting from open source software ubiquity
Thu, 23rd Jun 2022
#
application security
#
supply chain & logistics
#
open source
Widespread use of open source software in app development poses significant security risks, says Snyk and The Linux Foundation.

Free security training from the Open source Security Foundation
Thu, 31st Mar 2022
#
it training
#
devops
#
apm
A free training course on developing secure software from the Open source Security Foundation is now available.