Source
-
Blog
AI ‘slop security reports’ are driving open source maintainers mad
Open source project maintainers are drowning in a sea of AI-generated ‘slop security reports’, according to security report triage worker Seth Larson. Larson said he’s witnessed an increase in poor-quality reports that are wasting maintainers’ time and contributing to burnout. “Recently I’ve noticed an uptick in extremely low-quality, spammy, and LLM-hallucinated security reports to open source projects. The issue is…
Read More » -
Blog
Want to Contribute to Open Source Software? Here’s How to Get Started
Did you know you can contribute to many open-source projects without being an expert on GitHub, Git, or coding? Whether or not you’re an experienced programmer, you can learn how to use the most popular source code host in the world in just a few short steps. What Is Git and What Is GitHub? Git is the world’s leading version…
Read More » -
Blog
Open source malware surged by 156% in 2024
The growth of open source malware has continued apace in 2024, according to new research, with cyber criminals taking advantage of the proliferation of open source software. A report from software supply chain management firm Sonatype found there was a 156% increase in malicious packages identified on open source repositories over the past year. Sonatype has identified 778,529 malicious open…
Read More » -
Blog
big source of traffic is AI crawlers – Computerworld
One big source of traffic, it noted, is AI crawlers, which are increasingly under scrutiny as they scan the web and gobble up voluminous amounts of data to train large language models (LLMs). A big concern is that some take data even when they’re not supposed to, as opposed to “verified” good bots that typically come from search engines and…
Read More » -
Blog
The open source community relies on a loyal army of committed developers – but their security practices are putting the whole ecosystem at risk
Insufficient security on individual developer accounts maintaining some of the most popular packages poses a significant threat to the open source community and beyond, according to a report from the Linux Foundation. The Linux Foundation Census is the third report of its kind looking into the widespread use of free and open source software (FOSS), aggregating data from over 12…
Read More » -
Blog
Forget Samsung — we just got our first Snapdragon 8 Elite smartphone from an unlikely source
The Qualcomm Snapdragon 8 Elite mobile chipset was officially unveiled last month, and every time the company unveils a new chipset, it’s always a race to see which Android manufacturer is the first to install it in a commercially available handset. This year, Americans keen to get their hands on the first handset running the new chipset will have to…
Read More » -
Blog
“Markets do not stand still”: The UK needs to up its game to fend off open source competition
While open source software has had a particularly strong impact in the UK, the country risks losing its prominent position in the global ecosystem, according to a new report from OpenUK. Governments in France and Germany have expanded their investment and support for open source software development and contributions, meaning the growth of AI projects and companies in France has…
Read More » -
Blog
Nokia waves off IntelBroker breach claims, says leaked source code came from a third party application
Nokia has issued a statement claiming leaked source code data published on an underground hacking forum was stolen from a third-party server and poses no threat to Nokia or its customers. The Finnish telecommunications company downplayed the severity of the incident, claiming no company or customer data was implicated in the leak. The prominent threat actor IntelBroker listed a “large…
Read More » -
Blog
Nokia says hackers leaked third-party app source code
Nokia’s investigation of recent claims of a data breach found that the source code leaked on a hacker forum belongs to a third party and company and customer data has not been impacted. The statement comes in response to threat actor IntelBroker earlier this week releasing data belonging to Nokia, allegedly stolen after breaching a third-party vendor’s server. The hacker tried to…
Read More » -
Blog
Nokia investigates breach after hacker claims to steal source code
Nokia is investigating whether a third-party vendor was breached after a hacker claimed to be selling the company’s stolen source code. “Nokia is aware of reports that an unauthorized actor has alleged to have gained access to certain third-party contractor data and possibly data of Nokia,” the company told BleepingComputer. “Nokia takes this allegation seriously and we are investigating. To…
Read More »