Neo Malware: Malicious Open Source Packages
Malware is at the top of the list among things that keep security and development organizations on edge.Â
OpenSSF
How to Make Programming Language Package Repositories More Secure
Open source package repositories (like npm, PyPI, RubyGems, and others) serve out billions of packages per day. Most of the software we all use includes packages from these repositories, making them a critical part of securing software.
Datadog Joins Open Source Security Foundation (OpenSSF)
OpenSSF Welcomes Datadog as Premier Member
SOSS Community Day EU Agenda Now Live!
We're thrilled to announce that the agenda for Secure Open Source Software (SOSS) Community Day EU on September 19, 2024, is now live! Join us for a day filled with insightful technical talks, engaging panels, and a hands-on Table Top Exercise (TTX). SOSS Community Day EU will be co-located with the Open Source Summit Europe…
SOSS Fusion 2024 CFP Results: A Look at Our Diverse and Engaging Program
As the Call for Proposals (CFP) for the Secure Open Source Software (SOSS) Fusion Conference wrapped up, we wanted to share some insights about the submissions that highlight how Fusion...
OpenSSF Newsletter – July 2024
Welcome to the July 2024 edition of the OpenSSF Newsletter, with our latest information on what’s been happening lately and what’s on our radar. DOWNLOAD: What’s in the SOSS? An...
Celebrating Excellence: An Interview with Golden Egg Award Winner Christopher “CRob” Robinson
As we unveiled the Golden Egg Award winners in April during the SOSS Community Day North America, we recognized those who go above and beyond in enriching our community. Today, we spotlight Christopher “CRob” Robinson, the winner of the Golden Egg Award for OpenSSF Community Engagement. CRob has made continuous impactful contributions as the chair…
Recognizing Excellence in OSS Community: Golden Egg Award Nominations Are Now Open!
Submitting a nomination is easy! Fill out the nomination form, providing details about the nominee’s contributions and why you believe they deserve the Golden Egg Award.
AI Cyber Challenge (AIxCC) and the Needle Linux Kernel Vulnerability – Part 2
In part 1 we discussed the Artificial Intelligence Cyber Challenge (AIxCC), a two-year competition to create AI systems that find software vulnerabilities and develop fixes to them. We also discussed a specific vulnerability in the Linux kernel, called needle, as an example of the kind of vulnerability we’d like such tools to find and fix. …
The Linux Foundation and OpenSSF Release Report on the State of Education in Secure Software Development
Findings show nearly one-third of industry professionals are not familiar with secure software development practices