Topic

#open-source security

4 articles found

Aikido Security Acquires Root.io to Enhance Open-Source Security

Belgian cybersecurity company Aikido Security NV today announced that it has acquired Root.io Inc., a company that offers patching for vulnerable open-source software at the exact versions organizations are already running. Founded in 2020 as Slim.AI Inc., the startup offered a popular open-source c

#open-source security#aikido security#root.io#cybersecurity#india tech market

· · The Hacker News

Python Malware Targets Indian Developers via Hijacked Packages

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. "This attack avoids the most common npm execution paths through lifecycle scripts, perhaps in

#python malware#npm hijacked packages#india cybersecurity#open-source security#developer safety

· · The Hacker News

Cordyceps CI/CD Flaws Threaten 300+ GitHub Repositories

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains. The "critical exploitable pattern" has been codenamed Cordyceps by Novee Security. The issue can allow full attacker control of repositori

#cordyceps#ci/cd vulnerabilities#open-source security#india tech ecosystem#supply-chain attacks

· · OpenAI Blog

OpenAI's Daybreak Initiative Boosts Open Source Security Efforts

OpenAI introduces Patch the Planet, a Daybreak initiative helping open-source maintainers find, validate, and fix vulnerabilities with AI and expert review.

#openai#patch the planet#open-source security#ai initiatives#india tech