Topic
Every article tagged Open Source Security, newest first.
OWASP OASIS is now an official OWASP community project. Learn how its AI-powered fix automation and human validation model aims to remediate open-source vulnerabilities.
Keep reading
Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.
Anthropic's Frontier Red Team tested whether small open-weight AI models can self-replicate across cheap IoT devices without datacenter GPUs. See what worked, what was simplified, and how defenders can keep R0 below 1.
Google's GTIG data shows CVE disclosures doubled in 2026, n-day exploitation is accelerating, and AI stacks are now targets. See what it means and how to respond.