The conversation around open source cybersecurity is rapidly shifting from raising awareness to managing an explosion of fragmented solutions. Jen Easterly’s proposal for a billion-dollar public-interest fund highlights the undeniable reality that ...

Anthropic says its much-talked-about Mythos Preview model was able to detect more than 10,000 high- and critical-severity flaws for the 50-plus members of the AI vendor's Project Glasswing, and that such capabilities ...

Anthropic has introduced Project Glasswing, a cybersecurity initiative powered by an unreleased AI model called Claude Mythos. This system can identify zero-day vulnerabilities, generate exploits, and even help fix them—often without human ...

Anthropic’s Claude 4.6 found 500+ zero-days, but the real story is economic. As AI secures code, attackers are shifting to the "Trust Layer"—AI-driven social engineering and identity deception ...

NetRise launched NetRise Provenance on March 24 at RSAC 2026, a new product that adds contributor-level visibility to software supply chain analysis. Where most supply chain tools stop at identifying components and ...

Open-source dependencies introduce hidden risks, from transitive vulnerabilities to supply chain attacks. Learn how to reduce exposure ...

In the past 12 months, enterprise software development has changed faster than at any other point in our lifetime ...

Users and developers have hailed Linux as the operating system that “just works,” celebrating it for decades as a symbol of open source strength, speed, and security. Linux’s architecture and permissions model ...

Published 3:00 p.m. ET on October 31, 2025; last updated 5:00 p.m. ET on October 31, 2025 This week, an open source malware campaign dubbed ‘PhantomRaven’ has run rampant, flooding the npm ...

Explore top risks and proven open source security strategies ...