Open Source
"Once an attacker is past the initial access, the opportunities are ample for lateral movement and privilege escalation within a cluster..."
"We're taking on one piece of the network step-by-step. eBPF is making a lot of things possible and with cloud native, all aspects of the network and of connectivity have an opportunity to be redone better."
OpenSSF's new Malicious Packages Repository is free to use in and available in OSV format.
"The major concerns are that the responsibility for compliance would fall on the wrong parties..."
"This tofu has beef with HashiCorp..." Core OpenTofu Contributor and Scalr Founder talks to The Stack at OSS Europe.
Package includes Ollama, which lets you download a range of open source LLM model packages, bundling weights, configuration and data into a single portable file
Multinational's Global CISO touts critical work being done by the OpenSSF and tools like its Security Scorecard...