A daily digest at the press of a button.

Chainguard's new Athena coalition uses AI to fix open-source flaws - before attackers exploit them ...

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain ...

Open-source solutions power modern enterprises, underlying everything from website builds to ready-made and custom applications. Small and large companies alike leverage open-source office suites, and ...

Discover the best open source project management software in 2026 to streamline your workflow. Compare features & explore ...

Beyond uniting developers under shared ideologies, goals and pain points, Open Source Summit North America ignited conversations at the intersection of code, community and change. Against the backdrop ...

Commercial open source is often framed in the wrong way. On one side, you have people who treat open source as a moral commitment that becomes compromised the moment money enters the picture. On the ...

F5 fixes CVE-2026-42530 and CVE-2026-42055 in NGINX Open Source, addressing HTTP/3 and HTTP/2 flaws that could allow remote ...

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

Hannah Dacayanan of UnitedLex discusses ways in which automated software composition analysis tools identify open source ...

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.