The eBPF-based security observability and runtime enforcement platform has grown up and sped up.

At KubeCon, the need to bridge the skills gap was clearer than ever

Education is key to securing software. To help that happen, the Linux Foundation Training & Certification, ISC2,  and the OpenSSF.

Repeat after me: Do not — Do Not! — put hard-coded credentials in your production code repositories.

Sensitive details of charity donors leaked and also sensitive employee information had also been leaked during the attack – including police checks, child support documents, HR incidents, immigration sponsorship details, COVID-19 vaccination credentials, and notably, tax file numbers, passports, and licences.

Thanks to the way the networking protocol was designed, we are going to be living with this nasty bug for years to come.

Plan for Chrome echoes Apple iCloud Private Relay

The road to Hell is paved with good intentions, and for open source this is a well meaning cluster fudge

Docker adds its own twist to software supply chain security. 

Curl is built into and silently used in numerous Linux distributions. A nasty security hole within it has been revealed and patched.

The attack on Google Cloud was 7½ times larger than any previously recorded DDoS attack. Here's what else you need to know.

This has the potential to significantly improve Linux desktop and container security.

Somehow, advanced Triada malware was added to devices before reaching resellers.

Qualys has discovered a nasty security hole, dubbed 'Looney Tunables', in the glibc C library. This means almost all Linux distributions have a bad security problem.

The Linux Foundation, BastionZero, and Docker believe OpenPubkey bolsters zero-trust passwordless authentication.

Here we go again. Linux developers are trying, once more, to rid Linux of Microsoft's Remote Network Driver Interface Specification. Here's why it's complicated.

A Small Octopus and a Big Idea: How Wolfi Linux is Improving the Cloud’s Software Supply Chain Security.

The OpenSSL Project has announced that the long-term support version of OpenSSL 1.1.1 has come to the end of its lifecycle except for paying customers.

PostgreSQL and cURL aren't the only ones. Someone is faking security alerts for numerous open-source projects.

In the past I’ve sometimes described Australia as the land where internet policy is completely upside down. Rather than having a system that protects intermediaries from liability for third party c…