open source
Enter the WasmForge: Compiling Sliver into WebAssembly
In our last post we used a Claude skill to systematically beat down VirusTotal detection rates on offensive security tools, with a brief mention of a new loader we’d been using to ...
Open Source Is Free. Until Someone Comes to Collect.
 Open Source Is Free. Until Someone Comes to Collect.By Jacqueline Winter, CFO & CISO, ActiveStateFinance has a long history of discovering that the liabilities nobody tracked were the ones nobody paid for ...
Adversarial Oracles: LLM-Guided EDR Signature Reduction
In previous blog posts we’ve talked about getting nerd sniped. Today we’re going to talk about a kind of nerd sniping that any offensive security tool creator is familiar with; when your ...
The Liability Nobody Put on the Balance Sheet
 The Liability Nobody Put on the Balance SheetBy Jacqueline Winter, CFO & CISO, ActiveStateMost organizations have detailed processes for approving financial instruments they take onto their books. Open source software does not ...
Your Outdated Repository Still Works, But It May Not Be Safe
Repositories have long served as the backbone of software infrastructure, sitting between developers, CI/CD pipelines, public registries, and production releases. Today, the most sophisticated attackers have set their sights on developers ...
Your CISO Cannot Answer the Question Your CFO Is About to Ask
 Your CISO Cannot Answer the Question Your CFO Is About to AskBy Jacqueline Winter, CFO & CISO, ActiveStateAI-assisted development created an accountability gap that most security leaders cannot fill. The regulatory and ...
Managing Open Source Software Risks With the HeroDevs EOL Dashboard
Modern software delivery runs on open source. But as dependency graphs expand and application lifecycles stretch across years, end-of-life (EOL) components are becoming a structural security challenge ...
Building Trusted AI Development With Kiro and Sonatype Guide
AI-powered development tools accelerate the production of software. But they also introduce a familiar challenge: how do you ensure that what's generated is secure, compliant, and trustworthy? ...
Open Source Is on Every Balance Sheet. Most Organizations Have Just Not Found It Yet.
 Open Source Is on Every Balance Sheet. Most Organizations Have Just Not Found It Yet.By Jacqueline Winter, CFO & CISO, ActiveStateEvery CFO understands that an unmanaged liability is a governance failure. It ...
