Tag: Open Source
-
SecurityScorecard benchmark tests AI on third-party risk work and resistance to attack
Security ratings company SecurityScorecard Inc. today released an open benchmark for testing whether artificial intelligence models can …
-
OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken
The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. …
-
How bug bounty sharpens one researcher’s security skills
As Cybersecurity Awareness Month continues, the GitHub Bug Bounty team is excited to spotlight another top-performing security researcher …
-
Max-severity GitLab bug allows remote code execution over 12 years of releases
GitLab on Wednesday patched a maximum-severity flaw that could allow unauthenticated attackers to execute arbitrary code on self-managed …
-
Interoperability vs. Security: Why not both?
An open internet where people can freely build, share, and remix each other’s work is a powerful engine of grassroots innovation we’ve …
-
Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
Paulos Yibelo, the researcher who in early October claimed to have found a guest-host escape flaw in Linux KVM, the hypervisor used by most …
-
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a …
-
Perplexity AI open-sources its secure AI agent sandbox SPACE
The artificial intelligence search engine startup Perplexity AI Inc. is shifting its focus to AI agent security in the wake of several …
-
GitHub’s model for secret detection: Finding more secrets with less noise
GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan …
-
Privacy’s Defenders Podcast: No Privacy Without Encryption
Three decades ago, the U.S government treated encryption like a weapon, and it took some unlikely heroes to set it free: a grad student, a …
-
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)
GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression …
-
How one bug bounty researcher chooses the features they investigate
As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to spotlight one of the top-performing security …
●●●