Open Source Security

openssf.org·há 4 dias

What’s in the SOSS? Podcast #68 – S3E20 CRA Readiness: Practical Strategies for Open Source Communities with Megan Knight

Join Megan Knight on the What's in the SOSS podcast as she breaks down the upcoming EU Cyber Resilience Act (CRA) and shares practical compliance strategies for open source maintainers and organizatio

openssf.org·há 11 dias

What’s in the SOSS? Podcast #67 – S3E19 Funding the Future: Community Collaboration and the Spirit of Open Source with Mila Zhou

Summary Join host Yesenia as she sits down with Mila Zhou, Open Source Program Manager at AWS, to explore the fascinating intersection of finance, strategy, and security in the open source ecosystem.

openssf.org·há cerca de 1 mês

Navigating The OpenSSF is as Easy as Floating Down A Lazy River

Navigating the vast ecosystem of the Open Source Security Foundation (OpenSSF) is now as easy as floating down a lazy river. Discover our newly curated, role-based User Journeys designed to seamlessly

cdn.activestate.com·há cerca de 2 meses

The Dev vs. Security Conflict Root Cause Isn’t Culture. It’s Unmanaged Open Source.

Security flags the CVE. Engineering owns the sprint. Neither team pulled in that dependency, the AI did. Here's the real root cause of the dev-security conflict, and how to end it. The post The Dev vs

cdn.activestate.com·há 2 meses

Beyond the Buzzwords: Why True Cyber Resilience Starts at the Point of Ingestion

Gartner predicts 50% of CISOs will rebrand to cyber resilience by 2028. A rebrand without re-architecture isn't resilient. Here's where the rebuild actually has to start. The post Beyond the Buzzwords

cdn.activestate.com·há 2 meses

What Your SBOM Isn’t Telling You: Hidden Dependencies and the Blind Spots That End Careers

Security sets the policy. Engineering controls the pipeline. Nobody fully owns the risk. Here's the structural gap behind 30 years of vulnerability ownership confusion and how to close it. The post Wh

activestate.com·há 2 meses

What Your SBOM Isn’t Telling You: Hidden Dependencies and the Blind Spots That End Careers

Security sets the policy. Engineering controls the pipeline. Nobody fully owns the risk. Here's the structural gap behind 30 years of vulnerability ownership confusion and how to close it. The post Wh

activestate.com·há 2 meses

Leading Australian E-Commerce Innovator Secures White-Label Credit Product with ActiveState

Launching a white-label credit product meant unvetted open source was no longer acceptable. See how one Australian e-commerce leader secured its Python environment with ActiveState. The post Leading A

What’s in the SOSS? Podcast #68 – S3E20 CRA Readiness: Practical Strategies for Open Source Communities with Megan Knight

What’s in the SOSS? Podcast #67 – S3E19 Funding the Future: Community Collaboration and the Spirit of Open Source with Mila Zhou

Navigating The OpenSSF is as Easy as Floating Down A Lazy River

The Dev vs. Security Conflict Root Cause Isn’t Culture. It’s Unmanaged Open Source.

Beyond the Buzzwords: Why True Cyber Resilience Starts at the Point of Ingestion

What Your SBOM Isn’t Telling You: Hidden Dependencies and the Blind Spots That End Careers

What Your SBOM Isn&#8217;t Telling You: Hidden Dependencies and the Blind Spots That End Careers

Leading Australian E-Commerce Innovator Secures White-Label Credit Product with ActiveState

What Your SBOM Isn’t Telling You: Hidden Dependencies and the Blind Spots That End Careers