OpenSSF Stories

UK Stories

OpenSSF stories

OpenSSF joins forces with Eclipse Foundation for EU CRA initiative

The Open Source Security Foundation partners with the Eclipse Foundation and others to shape the EU's Cyber Resilience Act, aiming to enhance software supply chain security.

By Sean Mitchell • 2 min read • Fri, 24th May 2024

Global Stories

OpenSSF stories

Security Operations Centres

Linux Foundation launches Akrites to fix open source flaws

Backed by Amazon, Google and Microsoft, the scheme aims to speed fixes for flaws that could ripple through banks, hospitals and power grids.

By Joseph Gabriel Lagonsin • 5 min read • Last month

Application Security

OpenSSF adds five members & new security resources

Members are backing tougher open source security as OpenSSF expands guidance on regulation, Python coding and AI-driven vulnerability tools.

By Sofiah Nichole Salivio • 4 min read • Fri, 22nd May 2026

DevOps

Sonatype joins Linux Foundation registry working group

Sonatype joins Linux Foundation registry working group to tackle funding, governance and security pressures as package downloads near 10 trillion.

By Joseph Gabriel Lagonsin • 4 min read • Mon, 11th May 2026

DevOps

Cloudsmith adds controls to block risky dependencies

Cloudsmith adds automated controls to quarantine and block risky dependencies, tightening enforcement on software supply chain security.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 24th Mar 2026

Virtualisation

OpenSSF adds members, boosts AI & supply chain security

OpenSSF adds new members and launches AI security, supply chain and training initiatives after securing USD $12.5 million in funding.

By Sofiah Nichole Salivio • 4 min read • Tue, 24th Mar 2026

Hyperscale

Linux Foundation secures USD $12.5m for AI security

Linux Foundation wins USD $12.5m from tech giants to bolster AI-era open source security and ease pressure on overstretched maintainers.

By Joseph Gabriel Lagonsin • 5 min read • Wed, 18th Mar 2026

Data Protection

Adfinis unveils OpenBao services for secure secrets

Adfinis launches six OpenBao-based services to help regulated organisations modernise open source secrets and encryption management.

By Kaleah Salmon • 4 min read • Mon, 22nd Dec 2025

Supply Chain

OpenSSF welcomes Target, Thread AI & OSTIF to boost security

OpenSSF has welcomed Target, Thread AI, and OSTIF as general members, enhancing efforts to improve security across the open source software ecosystem.

By Sean Mitchell • 3 min read • Fri, 21st Nov 2025

Power / Energy

LF Energy unveils new open source projects for energy transition

LF Energy introduces five open-source projects for digital energy technologies, bolstering efforts towards energy transition.

By Shannon Williams • 3 min read • Wed, 6th Dec 2023

Advanced Persistent Threat Protection

OpenSSF announces new members & secure software development principles

OpenSSF introduces new members including Patchstack and SparkFabrik, and outlines secure software development principles.

By Sean Mitchell • 2 min read • Tue, 5th Dec 2023

Supply Chain

Investment in open source to skyrocket in next five years

Technology is critical in business, government, social development, and so much more—and open source is all too often at the forefront of what's next.

By Shannon Williams • 5 min read • Tue, 20th Dec 2022

Ransomware

2023 to be one of the most challenging years for cybersecurity - Venafi

Venafi has released its predictions for the cybersecurity landscape in 2023, indicating that this will be one the most challenging years yet for the industry.

By Catherine Knowles • 4 min read • Wed, 14th Dec 2022

Supply Chain

Endor Labs releases report on state of open source security

Endor Labs exposes the dangers of unchecked open source software reuse in application development, with 95% of vulnerabilities found in indirect dependencies.

By Catherine Knowles • 4 min read • Tue, 13th Dec 2022