Microsoft pushes open-source software kit to election agencies, voting-tech vendors
The code will be posted to GitHub, and can be layered onto existing voting software for added integrity.
How companies – and the hackers themselves – could respond to the OilRig leak
An unknown person or group started doxing the people behind OilRig sometime last month.
Backdoor vulnerability in open source tool exposes thousands of apps to remote code execution
The 2017 data breach at Equifax was possible because the company did not act to resolve a flaw in the open source Apache Struts framework.
GitHub rolls out new token scanning, security alert features
GitHub will automatically scan for access tokens in public code with its new beta. It's also launching an API for security advisories.
Snyk gets $22 million for platform that tracks security flaws in open source projects
Snyk's platform helps customers patch vulnerabilities in code pulled from open source platforms like GitHub, Bitbucket and GitLab. The company wants to eventually be able to fix those flaws in runtime.
Code for massive 'Memcrashed' DDoS attack made public
It's been just over a week since the first massive Memcached-fueled denial of service attack. The authors of the new tool is being released "to bring more attention to the flaw."