SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

OpenSSF Stories

American Stories

OpenSSF stories

Global Stories

OpenSSF stories

Bugtri launches in Sydney to curb AI vulnerability spam
Application Security

Bugtri launches in Sydney to curb AI vulnerability spam

Security teams are drowning in AI-generated bug reports, and 11 early users are already testing a system that filters the noise.

By Sean Mitchell • 3 min read • Last week
Google warns of rise in open source supply chain attacks
Ransomware

Google warns of rise in open source supply chain attacks

Malicious packages are now spreading faster across code repositories, with Google saying open source ecosystems face the sharpest rise in risk.

By Sean Mitchell • 5 min read • Last month
Linux Foundation launches Akrites to fix open source flaws
Security Operations Centres

Linux Foundation launches Akrites to fix open source flaws

Backed by Amazon, Google and Microsoft, the scheme aims to speed fixes for flaws that could ripple through banks, hospitals and power grids.

By Joseph Gabriel Lagonsin • 5 min read • Fri, 26th Jun 2026
OpenSSF adds five members & new security resources
Application Security

OpenSSF adds five members & new security resources

Members are backing tougher open source security as OpenSSF expands guidance on regulation, Python coding and AI-driven vulnerability tools.

By Sofiah Nichole Salivio • 4 min read • Fri, 22nd May 2026
Sonatype joins Linux Foundation registry working group
DevOps

Sonatype joins Linux Foundation registry working group

Sonatype joins Linux Foundation registry working group to tackle funding, governance and security pressures as package downloads near 10 trillion.

By Joseph Gabriel Lagonsin • 4 min read • Mon, 11th May 2026
Cloudsmith adds controls to block risky dependencies
DevOps

Cloudsmith adds controls to block risky dependencies

Cloudsmith adds automated controls to quarantine and block risky dependencies, tightening enforcement on software supply chain security.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 24th Mar 2026
OpenSSF adds members, boosts AI & supply chain security
Virtualisation

OpenSSF adds members, boosts AI & supply chain security

OpenSSF adds new members and launches AI security, supply chain and training initiatives after securing USD $12.5 million in funding.

By Sofiah Nichole Salivio • 4 min read • Tue, 24th Mar 2026
Linux Foundation secures USD $12.5m for AI security
Hyperscale

Linux Foundation secures USD $12.5m for AI security

Linux Foundation wins USD $12.5m from tech giants to bolster AI-era open source security and ease pressure on overstretched maintainers.

By Joseph Gabriel Lagonsin • 5 min read • Wed, 18th Mar 2026
Adfinis unveils OpenBao services for secure secrets
Data Protection

Adfinis unveils OpenBao services for secure secrets

Adfinis launches six OpenBao-based services to help regulated organisations modernise open source secrets and encryption management.

By Kaleah Salmon • 4 min read • Mon, 22nd Dec 2025
OpenSSF welcomes Target, Thread AI & OSTIF to boost security
Supply Chain

OpenSSF welcomes Target, Thread AI & OSTIF to boost security

OpenSSF has welcomed Target, Thread AI, and OSTIF as general members, enhancing efforts to improve security across the open source software ecosystem.

By Sean Mitchell • 3 min read • Fri, 21st Nov 2025
LF Energy unveils new open source projects for energy transition
Power / Energy

LF Energy unveils new open source projects for energy transition

LF Energy introduces five open-source projects for digital energy technologies, bolstering efforts towards energy transition.

By Shannon Williams • 3 min read • Wed, 6th Dec 2023
OpenSSF announces new members & secure software development principles
Advanced Persistent Threat Protection

OpenSSF announces new members & secure software development principles

OpenSSF introduces new members including Patchstack and SparkFabrik, and outlines secure software development principles.

By Sean Mitchell • 2 min read • Tue, 5th Dec 2023
Investment in open source to skyrocket in next five years
Supply Chain

Investment in open source to skyrocket in next five years

Technology is critical in business, government, social development, and so much more—and open source is all too often at the forefront of what's next.

By Shannon Williams • 5 min read • Tue, 20th Dec 2022
2023 to be one of the most challenging years for cybersecurity - Venafi
Ransomware

2023 to be one of the most challenging years for cybersecurity - Venafi

Venafi has released its predictions for the cybersecurity landscape in 2023, indicating that this will be one the most challenging years yet for the industry.

By Catherine Knowles • 4 min read • Wed, 14th Dec 2022
Endor Labs releases report on state of open source security
Supply Chain

Endor Labs releases report on state of open source security

Endor Labs exposes the dangers of unchecked open source software reuse in application development, with 95% of vulnerabilities found in indirect dependencies.

By Catherine Knowles • 4 min read • Tue, 13th Dec 2022
Significant security concerns resulting from open source software ubiquity
Application Security

Significant security concerns resulting from open source software ubiquity

Widespread use of open source software in app development poses significant security risks, says Snyk and The Linux Foundation.

By Shannon Williams • 4 min read • Thu, 23rd Jun 2022

Stories from Other Regions

OpenSSF stories

Optus, Medibank – and supply chains flying under the radar
Application Security

Optus, Medibank – and supply chains flying under the radar

Software supply chain attacks are becoming the biggest concern in cyber security, with organisations globally at risk.

By Eilon Elhadad • 3 min read • Wed, 7th Dec 2022