Open source software's tragedy of the commons

ow.ly/O4vi50RpUCA #opensource #softwarecomposition @techtarget

EU Common Criteria for IT Security Vulnerabilities: Halving the Effort for Impact Assessment through Automation

ow.ly/Yi4O50RpUBZ #opensource #securebydesign #sbom @compliancemag

New grant supports creation of UC network of open source program offices

ow.ly/Sht750RoMYQ #opensource #softwarecomposition #ospo UC Santa Barbara

Banks embrace open source for code, contribution and community
The rise of the open source programme office aims to create a centre for excellence and governance

ow.ly/t9nP50RoMUa #opensource #softwarecomposition [From: The Banker]

The Boundaries of Open Source: China's Supreme People’s Court Upholds Copyright for Software Built on Open Source Code

lexology.com/library/detail… #opensource #softwarecomposition #gplviolation Lexology

If you want to understand how well you manage your software supply chain. Try assessing agains ISO 5230 OpenChain Standards

sourcecodecontrol.typeform.com/to/DkvC2Ebc #opensource #softwarecompostion #openchain

Learn More About ISO/IEC DIS 18974, OpenChain Security Assurance Specification

ow.ly/rrBz50RnOjU #opensource #securebydesign #softwarecomposition OpenChain Project

SEC targets Uniswap Labs, raising concerns over open-source code liability

ow.ly/guvb50RnOen #opensource #softwarecomposition #securebydesign [From: Cointelegraph]

Fortifying the Software Supply Chain

ow.ly/9eiL50RmTRM #opensource #securebydesign #sbom The New Stack

Dependency Confusion Vulnerability Found in Apache Project

infosecurity-magazine.com/news/dependenc… #opensource #securebydesign #softwarecomposition @infosecuritymag

Preparing for CISA’s Secure Software Development Attestation and PCI compliance updates with ASPM

ow.ly/P3fI50RmcqY #opensource #securebydesign #sbom @cybersecuritydive

Hidden Tech Debt: The Importance Of Better Updates For Commercial Software

forbes.com/sites/forbeste… Tech Debt: The Importance Of Better Updates For Commercial Software #opensource #securebydesign #softwarecomposition @forbes

This Week in AI: When ‘open source’ isn’t so open

ow.ly/7Bf050Rkvix #opensource #softwarecomposition @techcrunch

Valkey is Rapidly Overtaking Redis

ow.ly/mUp050RkvhI #opensource #softwarecomposition DevOps.com

Why Understanding Your Open Source Licenses Matters

ow.ly/Fp1c50RkmRz #opensource #softwarecomposition @secutityblvd

Protobom: Open-source software supply chain tool

ow.ly/996t50RkmQH #opensource #securebydesign #sbom [From:HelpnetSecurity]

OWASP looks to future-proof SBOMs with CycloneDX

ow.ly/TA3950RkmQp # #opensource #securebydesign #sbom Security Boulevard

Questioning the Conventional Wisdom on Liability and Open Source Software

ow.ly/cbN350RjBR7 #opensource #softwarecompostion Lawfare

Protobom: Paving the Path for SBOM Adoption

ow.ly/8HoM50RjBVP #opensource #securebydesign #sbom The New Stack