Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner . "Projects that join ...

Here's a provocative statistic: Within a group of leading companies that includes Microsoft, PayPal, Salesforce, Nokia, Sony Mobile, and Visa, the average ratio of full-time software security ...

Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe insecure use of open-source software in 2025. Open-source software is common ...

Secure software development has made great strides in the last decade or two, and I am optimistic about the future. In the 15 years since my book, Building Secure Software, was published, we've seen a ...