article thumbnail

Avoid An Open Source Security Nightmare

Forrester IT

We’ve had a few high-profile security problems with open source software. Some are wondering if it’s safe to use open source software at all. A disgruntled developer recently delivered intentionally modified releases of his faker.js and colors.js packages, which broke “thousands of projects” that relied on them.

article thumbnail

Getting the most out of open source without sacrificing security

CIO Business Intelligence

Open source has seen a great deal of momentum among mainframers, making collaboration easier and providing greater transparency. But for all of its benefits, open source is not without risks. By its very nature, open-source code is accessible to whoever wants to see it—including potential attackers.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Some Good News About Application Security

Forrester IT

In my new report, “The State Of Application Security, 2020,” some of the trends are. Applications remain the most popular attack vector, open source continues to infect everything, and too many industries are not investing in the application security controls they need.

article thumbnail

Log4j, Open Source Maintenance, And Why SBOMs Are Critical Now

Forrester IT

Over the weekend, security pros took to social media to understand and dissect the Log4j vulnerability. The fact of the […].

article thumbnail

Why Modernizing Mainframe Development Needs Secure Open Source

CIO Business Intelligence

One technology that modern mainframes need is secure open-source software. Four years ago, the Linux Foundation’s Open Mainframe Project introduced Zowe , a first-of-its-kind open-source framework based on z/OS, making it easier than ever to connect the gap between modern applications and the mainframe.

article thumbnail

Open source code for commercial software applications is ubiquitous, but so is the risk

Tech Republic

As the SolarWinds and Log4j hacks show, vulnerabilities in open source software used in application development can open doors for attackers with vast consequences. A new study looks at the open source community’s efforts to “credit-rate” the risk.

article thumbnail

This new open source project could be key to securing database applications

Tech Republic Security

Commentary: Cyral has been on a roll with two open source projects designed to make security a natural part of the development workflow.