Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner . "Projects that join ...

Approximately 66,000 unique entries are expected to emerge in 2026 , many boosted or even created by AI.

Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure use of open-source software in 2025. Open-source software is common ...

Anthropic has launched a free AI-powered vulnerability scanning service designed to help developers identify security flaws in open-source software. Called OSS Scanner, the opt-in service uses the ...

Google has paused product vulnerability submissions to its open-source bug bounty program after a surge in automated reports overwhelmed the process. The Open Source Software Vulnerability Reward ...

Two years ago, the joint government-private sector response to the Log4j vulnerability that spawned 800,000 attacks worldwide led to the Enduring Security Framework for federal agencies adopting open ...

The Linux Foundation, a nonprofit organization enabling mass innovation through open source, today announced the release of “Census III of Free and Open Source Software—Application Libraries” (Census ...

In February, The Linux Foundation’s Open Source Security Foundation (OpenSSF) initiated the Open Source Project Security Baseline (OSPS Baseline) to establish minimum security requirements for ...

Federal agencies can benefit from open source software because its source code can be independently reviewed, reducing reliance on vendor claims. It can reduce dependence on a single supplier, lower ...

Google’s study examines open source maintenance costs, showing how local patches and dependencies increase package update ...