SiliconRepublic

GitHub moves to protect open-source software from supply chain attacks

GitHub plans to use the code-signing platform Sigstore to protect its open-source registry, which was impacted by a cyberattack earlier this year. Microsoft-owned GitHub is proposing a new strategy to ...
SiliconRepublic

New GitHub fund aims to improve open-source security

According to GitHub, only 6pc of organisations investing in open source prioritise comprehensive security audits. Code-hosting platform GitHub has launched a $1.25m funding program aimed at supporting ...
PR Newswire

Hopper Emerges from Stealth to Redefine Open-Source Security

TEL AVIV, Israel and NEW YORK, April 22, 2025 /PRNewswire/ -- Hopper officially launched out of stealth to reinvent how organizations manage open-source software (OSS) risk. Modern software relies on ...
Indiatimes

Google’s AI bug hunter ‘Big Sleep’ finds 20 security flaws in open source software

Google's AI-powered vulnerability researcher, Big Sleep, has identified 20 security vulnerabilities in widely used open-source software, including FFmpeg and ImageMagick. Developed by DeepMind and ...
Ars Technica

Supply-chain attacks on open source software are getting out of hand

It has been a busy week for supply-chain attacks targeting open source software available in public repositories, with successful breaches of multiple developer accounts that resulted in malicious ...