How open source C++ code can introduce security risks

The Security Risks of Conflating C and C++: Why the Differences Matter for Secure Coding

This article argues that treating C and C++ as interchangeable languages ("C/C++") is a dangerous practice that leads to security vulnerabil

Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts

The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att

Growing Threat of Malicious Attacks via Open-Source Packages

Malicious attacks using open-source packages are a growing threat, with cybercriminals exploiting repositories like PyPI and npm. Despite in

Census II Report on Open Source Software

Comparing memory safety CVEs in Rust versus C and C++

This article analyzes how memory safety CVEs (Common Vulnerabilities and Exposures) differ between Rust and C/C++ ecosystems. It focuses on

Software Supply Chain Attacks: Exploiting Trust Assumptions in Modern Development

The article examines the growing threat of software supply chain attacks that exploit fundamental trust assumptions in modern development wo