HomePodcastsCategoriesEpisodesWeekly ReportsNewsletterBlogInfo

Open Source Security

Open Source Security thumbnail

Open Source Security is a podcast to educate both developers and users on how open source security works.

Categories:
security

Links

Subscribe: rss.libsyn.com/shows/102309/destinations/542864.xmlHome: opensourcesecurity.io

Episodes

Showing 11-20 of 25

StartPreviousNextEnd
Open Source Malware with Paul McCarty thumbnail

Open Source Malware with Paul McCarty

13 Apr 2026

Open Source Malware (OSM) addresses the gap in detecting intentional malicious open-source components by cataloging threats, de-obfuscating code, extracting indicators of compromise, and providing post-incident data, while tackling challenges like persistent malicious packages, limitations of traditional tools against interpreted languages, fragmented collaboration, AI risks, and the need for improved CI/CD security, audit tools, and balanced AI-human oversight.

Open episode
Package management challenges with Andrew Nesbitt thumbnail

Package management challenges with Andrew Nesbitt

6 Apr 2026

Challenges in package management across ecosystems demand standardization to address fragmentation in naming, versioning, and dependencies, interoperability gaps between system-level and language-specific tools, SBOM scanner inconsistencies, and cross-ecosystem complexity, urging collaboration on shared specs and protocols despite cultural and practical barriers.

Open episode
Open Source Security at scale with Michael Wisner thumbnail

Open Source Security at scale with Michael Wisner

30 Mar 2026

The Alpha Omega Project addresses open-source security by targeting leverage points like Node.js and Python ecosystems, advocating for systemic solutions, dedicated security roles, sustainable funding, and registry infrastructure improvements to counter fragmented practices and downstream risks.

Open episode
2026 State of the Software Supply Chain with Brian Fox thumbnail

2026 State of the Software Supply Chain with Brian Fox

23 Mar 2026

The State of the Software Supply Chain Report underscores explosive open source growth (10T annual downloads) paired with critical challenges like malware proliferation (1.2M malicious packages), unresolved vulnerabilities (65% unaddressed), infrastructure strain, AI's dual role in risk (hallucinations) and potential (MCP systems), and urgent needs for improved tools, policies, and cost management amid regulatory and scalability pressures.

Open episode
MCP and Agent security with Luke Hinds thumbnail

MCP and Agent security with Luke Hinds

16 Mar 2026

The text explores AI agent security risks like prompt injection and open-source vulnerabilities, emphasizing the No-NO project's kernel-based sandboxing with a deny-by-default model, hardware enclaves, and Rust-driven efficiency, alongside layered defenses, restricted commands, and collaborative efforts to tackle evolving threats like social engineering and insecure coding practices.

Open episode

Showing 11-20 of 25

StartPreviousNextEnd