Category
Open Source Software Security
- 10
- stories
- AUG 25
- latest
Linux Foundation Backs New TRACE AI Security Standard
TRACE aims to help prove that sensitive data in organizations is being handled “according to policy” by AI agents and open weight models.
LINDSEY O'DONNELL-WELCH · AUG 25 · 2 min
All Open Source Software Security
Grafana Investigating Token Compromise and Extortion Attempt
An “unauthorized party” obtained a token with access to the Grafana Labs GitHub environment and downloaded Grafana’s codebase.
Lindsey O'Donnell-Welch · 2 min
Ongoing Supply Chain Attack Expands to PyPi
Researchers have linked the compromise to the “Mini Shai-Hulud” campaign, which has been ongoing for several weeks and is associated with TeamPCP.
Dennis Fisher · 3 min
New Dirty Frag Linux Bug Emerges
The vulnerability class is a potent new iteration of kernel bugs that corrupt the page cache of read-only files and is a follow-on to the recently disclosed Copy Fail Linux LPE bug.
Dennis Fisher · 3 min
A Copy Fail FAQ
The latest branded bug is a slick, portable LPE in many Linux kernels going back to 2017.
Dennis Fisher · 3 min
Supply Chain Attack Hits Axios NPM Packages
Axios is a dependency in nearly 80% of all cloud and code environments and sees approximately 100 million downloads per week.
Dennis Fisher · 4 min
High-Risk Authentication Bypass Flaw Found in Telnetd
The flaw is in the way that the telnetd server handles some specific user-supplied data. An attacker who exploits this vulnerability would be able to bypass the authentication path and gain root privileges.
Dennis Fisher · 1 minGitHub Aims to Improve npm Security After Malware Campaigns
GitHub said the changes will help “fortify the security of the software supply chain” after a recent surge of attacks targeting the npm ecosystem.
Lindsey O'Donnell-Welch · 4 min