Security is a looming issue for deployments based on open-source software, Kubernetes co-founder Craig McLuckie said 

This obnoxious constellation of firmware attacks takes over computers. Here's which devices are vulnerable and what you can do to protect them.

At Open Source Summit Japan, Linux developer Greg Kroah-Hartman recaps the current state and future challenges of kernel security, including the specter of government regulation and the essential pain of unceasing updates.

The eBPF-based security observability and runtime enforcement platform has grown up and sped up.

At KubeCon, the need to bridge the skills gap was clearer than ever

Education is key to securing software. To help that happen, the Linux Foundation Training & Certification, ISC2,  and the OpenSSF.

Repeat after me: Do not — Do Not! — put hard-coded credentials in your production code repositories.

Sensitive details of charity donors leaked and also sensitive employee information had also been leaked during the attack – including police checks, child support documents, HR incidents, immigration sponsorship details, COVID-19 vaccination credentials, and notably, tax file numbers, passports, and licences.

Thanks to the way the networking protocol was designed, we are going to be living with this nasty bug for years to come.

Plan for Chrome echoes Apple iCloud Private Relay

The road to Hell is paved with good intentions, and for open source this is a well meaning cluster fudge

Docker adds its own twist to software supply chain security. 

Curl is built into and silently used in numerous Linux distributions. A nasty security hole within it has been revealed and patched.

The attack on Google Cloud was 7½ times larger than any previously recorded DDoS attack. Here's what else you need to know.

This has the potential to significantly improve Linux desktop and container security.

Somehow, advanced Triada malware was added to devices before reaching resellers.

Qualys has discovered a nasty security hole, dubbed 'Looney Tunables', in the glibc C library. This means almost all Linux distributions have a bad security problem.

The Linux Foundation, BastionZero, and Docker believe OpenPubkey bolsters zero-trust passwordless authentication.

Here we go again. Linux developers are trying, once more, to rid Linux of Microsoft's Remote Network Driver Interface Specification. Here's why it's complicated.

A Small Octopus and a Big Idea: How Wolfi Linux is Improving the Cloud’s Software Supply Chain Security.