Curated security research, vulnerabilities, advisories and tools for practitioners.

#open-source

Security coverage tagged open-source. (Page 5)

121.

Announcing two new LMS libraries

blog | 2024-04-26 13:00 | blog.trailofbits.com | original ↗ | #open-source | #rust | #post-quantum-cryptography

122.

Hydradancer: Faster USB Emulation for Facedancer

research | 2024-04-17 22:00 | blog.quarkslab.com | original ↗ | #open-source | #fuzzing | #hardware

123.

5 reasons to strive for better disclosure processes

blog | 2024-04-15 13:00 | blog.trailofbits.com | original ↗ | #open-source | #github | #rust

124.

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

vulnerability | 2024-04-01 16:00 | CVE-2024-3094 | hackerone.com | original ↗ | #supply-chain | #open-source | #linux

125.

Finding the needle in the haystack: effortless SBOM search in your cloud with Wiz

blog | 2024-04-05 13:08 | wiz.io | original ↗ | #cloud | #cloud-security | #open-source

126.

NamespaceHound: protecting multi-tenant K8s clusters

blog | 2024-03-13 17:57 | wiz.io | original ↗ | #cloud-security | #open-source | #kubernetes

127.

How we applied advanced fuzzing techniques to cURL

blog | 2024-03-01 14:30 | blog.trailofbits.com | original ↗ | #open-source | #fuzzing | #curl

128.

The Family of Safe Golang Libraries is Growing!

blog | 2024-02-26 00:00 | bughunters.google.com | original ↗ | #open-source | #secure-coding | #software-security

129.

Kali Linux 2024.1 Release (Micro Mirror)

blog | 2024-02-28 00:00 | kali.org | original ↗ | #open-source | #kali-linux | #release-notes

130.

Continuously fuzzing Python C extensions

blog | 2024-02-23 14:30 | blog.trailofbits.com | original ↗ | #open-source | #fuzzing | #python

131.

Nom for Security: A Proactive Security Review of Nomulus

blog | 2024-02-20 00:00 | bughunters.google.com | original ↗ | #open-source | #proactive-security | #google

132.

Introducing DIFFER, a new tool for testing and validating transformed programs

blog | 2024-01-31 14:30 | blog.trailofbits.com | original ↗ | #open-source | #fuzzing | #binary-analysis

133.

Kali Linux DEI Promise

blog | 2024-01-29 00:00 | kali.org | original ↗ | #gitlab | #open-source | #community

134.

We build X.509 chains so you don’t have to

blog | 2024-01-25 14:00 | blog.trailofbits.com | original ↗ | #open-source | #rust | #cryptography

135.

Celebrating our 2023 open-source contributions

blog | 2024-01-24 14:00 | blog.trailofbits.com | original ↗ | #open-source | #cryptography | #community

136.

Internet freedom with the Open Technology Fund

blog | 2024-01-15 13:30 | blog.trailofbits.com | original ↗ | #open-source | #security-audit | #pypi

137.

Securing open-source infrastructure with OSTIF

blog | 2024-01-09 14:00 | blog.trailofbits.com | original ↗ | #open-source | #code-review | #security-audit

138.

Blue Galaxy Energy: a new White-box Cryptanalysis Open Source Tool

tool | 2023-12-20 23:00 | blog.quarkslab.com | original ↗ | #open-source | #cryptography | #aes

139.

Introducing Swagger Jacker: Auditing OpenAPI Definition Files

blog | 2023-12-12 00:00 | bishopfox.com | original ↗ | #open-source | #api-security | #penetration-testing

140.

How CISA can improve OSS security

blog | 2023-11-20 14:35 | blog.trailofbits.com | original ↗ | #supply-chain | #memory-safety | #open-source

141.

Assessing the security posture of a widely used vision model: YOLOv7

vulnerability | 2023-11-15 15:15 | blog.trailofbits.com | original ↗ | #rce | #open-source | #denial-of-service

142.

Our audit of PyPI

blog | 2023-11-14 13:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #pypi

143.

Celebrating One Year of CloudFox

blog | 2023-09-29 00:00 | bishopfox.com | original ↗ | #cloud | #cloud-security | #aws

144.

Use our suite of eBPF libraries

blog | 2023-08-09 10:45 | blog.trailofbits.com | original ↗ | #open-source | #linux | #kernel

145.

Introducing jsluice: The Why Behind JavaScript Gold Mining (Part 1)

blog | 2023-07-20 00:00 | bishopfox.com | original ↗ | #open-source | #security-tools | #javascript

146.

Introducing jsluice: A Technical Deep-Dive for JavaScript Gold (Part 2)

blog | 2023-07-20 00:00 | bishopfox.com | original ↗ | #open-source | #web-security | #security-tools

147.

PASTIS For The Win!

research | 2023-05-16 22:00 | blog.quarkslab.com | original ↗ | #open-source | #fuzzing | #symbolic-execution

148.

Burp Suite Enterprise Edition Power Tools: Unleashing the power to the command line, Python, and more

blog | 2023-03-21 14:30 | portswigger.net | original ↗ | #open-source | #devops | #python

149.

Dark Phoenix: a new White-box Cryptanalysis Open Source Tool

tool | 2023-02-27 23:00 | blog.quarkslab.com | original ↗ | #open-source | #cryptography | #cryptanalysis

150.

Spoofy: An Email Domain Spoofing Tool

blog | 2023-02-01 00:00 | bishopfox.com | original ↗ | #open-source | #email-security | #security-tools

← Previous More →