Securing Open Source

Emergency stop button: The Python Package Index was drowning in malicious code again, so they had to shut down registration for cleanup ...

UNC5174 ❤ UNC302: CVSS 10 and 9.8 vulnerabilities exploited by Chinese threat actor for People’s Republic ...

GoFAIL: Researchers worm their way into broken cache-filling microcode in most Macs and iPads ...

Iran and China fingered: Biden admin. chides governors: Water infra. lacks “even basic cybersecurity precautions.” ...

Wanna be a VRP VIP? Last year, $GOOG paid $10 million to ethical hackers for finding vulnerabilities ...

Forking hell: Scrotebots clone thousands of projects, injecting malware millions of times ...

The Cloud Native Computing Foundation (CNCF) announced today that Falco, an open source tool for defining security rules in Linux environments, has officially graduated ...

Pay no attention to that man: State Dept. Global Engagement Centre chief James Rubin (pictured) follows the yellow brick road ...

Underpaid, overworked and angry: Whistleblower in hacker contractor firm for Chinese government blows lid off tactics, techniques and procedures ...

RaaS nicked: 11-nation army led by UK eliminates ransomware-for-hire scrotes’ servers ...