Most security teams begin their software supply chain journey with SCA tools to manage open source risk and then stop there.

Since Russian troops invaded Ukraine more than three years ago, Russian technology companies and executives have been widely sanctioned for supporting the Kremlin. That includes Vladimir Kiriyenko, ...

What’s Next for Open Source Software Security in 2025? Your email has been sent Hidden dependencies, social engineering attacks, and the complexity of foundation models can all contribute tothe ...

ZUG, Switzerland, Jan. 16, 2026 (GLOBE NEWSWIRE) -- tea.xyz has announced their new ecosystem findings highlighting escalating risks across the global open-source software supply chain, warning that ...

Cybersecurity company Snyk Ltd. today announced the launch of its Secure Developer Program, a new initiative designed to empower open-source software maintainers with cutting-edge, develop-friendly ...

Open-source software has become a prime target in the escalating wave of cybersecurity threats. As attacks grow more sophisticated, the open-source community is racing to close critical security gaps ...

Sonar, the code quality and security leader, sets its sights on Tidelift, a provider of software supply chain security solutions for mitigating open source software risk, having entered a definitive ...

In February, The Linux Foundation’s Open Source Security Foundation (OpenSSF) initiated the Open Source Project Security Baseline (OSPS Baseline) to establish minimum security requirements for ...