SonarSource SA, which does business as Sonar, said today that it has signed a definitive agreement to acquire Tidelift Inc., a provider of services to manage open-source components. Terms weren’t ...

Capital One has open-sourced VulnHunter, an AI security tool that finds exploitable code flaws, maps attack paths and helps developers fix vulnerabilities faster.

Is open source the answer to rogue AI agents? Nvidia's new alliance says yes ...

Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure use of open-source software in 2025. Open-source software is common ...

Nvidia is launching a new alliance focused on building and sharing open-source AI tools to boost cybersecurity defenses, as the push for open-source technologies ramps up in the U.S. Nvidia announced ...

SARATOGA, Calif.--(BUSINESS WIRE)--Lineaje, the full-lifecycle software supply chain security company, today launched end-to-end capabilities that will fundamentally transform how organizations ...

Two years ago, the joint government-private sector response to the Log4j vulnerability that spawned 800,000 attacks worldwide led to the Enduring Security Framework for federal agencies adopting open ...

Strategic collaboration will unite two global open source communities to advance security practices, support maintainers and ...

A ban on open Chinese AI models under the guise of security might actually put our cybersecurity more at risk.

In February, The Linux Foundation’s Open Source Security Foundation (OpenSSF) initiated the Open Source Project Security Baseline (OSPS Baseline) to establish minimum security requirements for ...