Notices by OpenSSF (openssf@social.lfx.dev)

AI is flooding open source projects with vulnerability reports faster than maintainers can handle. OpenSSF and CNCF just dropped the free playbook.

"This is math, not magic. And with the right practices, it is manageable."

Download your copy: https://openssf.org/resources/securing-open-source-in-the-age-of-ai-a-practical-guide/

📖 Read OpenSSF's blog: Understanding the CRA: OpenSSF’s Role in the Cyber Resilience Act Implementation – Part 1

🔍 The CRA officially takes effect on December 10, 2024, introducing a transformative framework for #cybersecurity in products with digital elements across Europe.

📚 Part 1 of our blog series covers:
- A comprehensive overview of the CRA and its relevance to #OSS
- Linux Foundation Europe and OpenSSF’s efforts to support CRA implementation

Read the blog: https://openssf.org/blog/2024/11/25/understanding-the-cra-openssfs-role-in-the-cyber-resilience-act-implementation-part-1/

📣 Canonical now issues Ubuntu Security Notices in the OSV format, a step forward for the OpenSSF Vulnerability Disclosures Working Group! 🎉 This collaboration aims to simplify vulnerability management & enhance #OSSSecurity.

Read on and learn more: https://openssf.org/blog/2024/06/11/ubuntu-security-notices-now-available-in-osv/

Blog by Lech Sandecki, Canonical and Andrew Pollock, Google.
@ubuntu

Join us for the inaugural OpenSSF Hong Kong Meetup on March 1 at 6 PM HKT https://openssf.org/blog/2023/02/21/inaugural-openssf-hong-kong-meetup-on-march-1/