Security News > 2017 > April > Organizations are not effectively dealing with open source security threats (Help Net Security)

Black Duck conducts hundreds of open source code audits annually, primarily related to Merger & Acquisition transactions. Its Center for Open Source Research & Innovation (COSRI) analyzed 1,071 applications audited during 2016 and found both high levels of open source usage – 96% of the apps contained open source – and significant risk to open source security vulnerabilities – more than 60% of the apps contained open source security vulnerabilities. Notably, audit results of applications … More →
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/SNeAaJqxMsA/
Related news
- Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them (source)
- Balancing proprietary and open-source tools in cyber threat research (source)
- Sara: Open-source RouterOS security inspector (source)
- What’s Next for Open Source Software Security in 2025? (source)
- GitHub CISO on security strategy and collaborating with the open-source community (source)
- Contextal Platform: Open-source threat detection and intelligence (source)
- Fleet: Open-source platform for IT and security teams (source)
- Addressing the intersection of cyber and physical security threats (source)
- Inconsistent security strategies fuel third-party threats (source)
- Orbit: Open-source Nuclei security scanning and automation platform (source)