Conference badges can mean more than a name 🎟️ Madalin shares what it has meant to represent the Open Source Security Foundation and The Linux Foundation across Europe 🌍 from #opensource events to policy rooms and standards discussions. Read the story: openssf.org/blog/2026/01... #OSSSecurity

🔍 VEX promises clarity in vulnerability management, but adoption is still uneven. This #OpenSSF community paper looks at: • What’s working (and what isn’t) • CSAF vs OpenVEX vs SPDX vs CycloneDX • Tooling gaps, trust, and regulation ...and more. 🔗: openssf.org/blog/2026/01...

👀 Everyone’s talking about the #OSPSBaseline. This new blog serves as a "Resource Hub" where you can learn what it is, see it in action, and understand how open source projects can improve security over time. 📎 Read: openssf.org/blog/2026/01...

📖 Part 2 of this blog series shares practical tips for using #AI in software development, avoiding “vibe coding,” & strengthening security through human review & intent. Take a clear look at where AI helps, where it doesn’t, & what comes next: openssf.org/blog/2026/01...

🎙️ "What's in the SOSS?" Podcast Season Finale is live! Join co-hosts CRob & Yesenia for a special season finale celebrating OpenSSF’s 5th anniversary, & a look back at a truly transformative year for open source security. 🛡️ 🎧 Listen: openssf.org/podcast/2025... #OSSSecurity

💻 AI is now the norm in software development, but security hasn’t caught up. This blog explains: • Why productivity is driving #AI adoption • Where AI-generated code creates real security risk • What developers need to watch out for Read Part 1: openssf.org/blog/2025/12...

🧑‍🌾 bomctl makes SBOMs easier to work with by handling format and version differences for you. Convert between SPDX and CycloneDX, upgrade spec versions, and link #SBOMs across suppliers and systems. Watch the OpenSSF Project Spotlight about #bomctl: youtu.be/Tax1pNaySYQ?...

OpenSSF-funded improvements to sigstore’s rekor-monitor are making transparency logs easier to monitor for malicious package releases and identity misuse. Great work by Trail of Bits, with support from the sigstore maintainer's Hayden Blauzvern and Mihai Maruseac. openssf.org/blog/2025/12...

As 2025 comes to a close, we’re grateful for the people behind open source security. Thank you for your collaboration, commitment, and community spirit. 📘 Explore the 2025 OpenSSF Annual Report: openssf.org/download-the... Happy Holidays from the #OpenSSFCommunity.

The December 2025 #OpenSSF Newsletter is live 🎉 Featuring the 2025 Annual Report, free education courses, new podcast episodes, project updates, and upcoming events across the open source security community. Read it here 👉 openssf.org/newsletter/2...

🛡️ #gittuf brings supply chain security to the source itself - applying portable, policy-based attestations directly to Git repositories. From two-party reviews to test enforcement, gittuf makes GitOps & repo-driven workflows more trustworthy by default. 🎥 : youtu.be/bQ-GHyHJcbc?...

🎙️ New episode of What’s in the SOSS is live! Justin Cappos from @nyutandon.bsky.social joins #OpenSSF to talk about software supply chain security education, open source collaboration, and preparing students for real world security work. 🎧 Listen here: openssf.org/podcast/2025...

When a new vulnerability drops, the first question is always: Is this in my supply chain? 🔍 By ingesting and enriching #SBOMs with vulnerability and dependency data, #GUAC lets you query your entire application portfolio and pinpoint where action is needed immediately. 🎥 youtu.be/uDT0xes5ico?...

💡 This week’s OpenSSF Project Spotlight explores the Model Signing project with Mihai. Learn how verified model signatures help trainers & developers ensure their models haven’t been altered; and why lightweight, flexible signing beats container-bound approaches. 👀 youtu.be/P1AE23uZQ50?... #AIML

💡 Read the final post of the From Beginner to Builder blog series, where we highlight free courses that help contributors build confidence across AI/ML #security, policy & compliance, ethics, inclusion, & community leadership and more! Read now: openssf.org/blog/2025/12...

🎉 We’re excited to share our 2025 Annual Report, highlighting the milestones & collective achievements that shaped this year. Read the blog for a first glimpse into the stories, challenges, and quiet breakthroughs behind the numbers. 📘 Blog: openssf.org/blog/2025/12... #OpenSSF #2025Wrapped

💡 How can developers work with SBOMs without worrying about formats, parsers, or complex tooling? ⚙️ Puerco introduces #Protobom, a universal I/O layer for SBOM data that lets you read and write any SBOM format through a single, unified abstraction. Learn more: youtu.be/YhdRE6IdUuw?...

🇰🇷 #OpenSSFCommunity Day Korea took place this November in Seoul, bringing developers and security engineers together for a day of practical discussions on software security. 💬 If you missed the event, don’t miss the full recap: openssf.org/blog/2025/12...

🌟 Security Insight: A New OpenSSF Project Highlight Eddie Knight explains Security Insights, an OpenSSF specification that assists projects in publishing important security statistics in an organized, machine-readable way. Watch the video: youtu.be/kWpncbcqscc?... #OpenSSF

#CyberWeek is LIVE! ⚡ Hear from David A. Wheeler on why now is the best time to build your security skills. From Dec 1–9, get the Linux Foundation Education's biggest course savings! Your future self will thank you. ➡️ training.linuxfoundation.org/cyber-week-2... ➡️ openssf.org/training/

New What’s in the SOSS episode with Jay White from Microsoft. We talk AI, model signing, supply chain security, and why community collaboration matters. Listen here: openssf.org/podcast/2025... #OpenSSF

💡 OpenSSF Project Highlight: Sigstore - A Wax Seal of Security for the Digital Era ❓ Why this matters: the Sigstore project is building a modern, transparent trust layer for open source. Watch this interview and learn more about #Sigstore: youtu.be/m5eTw4x33kU?...

🌟 New OpenSSF Project Spotlight 💃 In this interview, SLSA Steering Committee member Tom Hennen (Google) breaks down how SLSA is helping organizations strengthen trust across the software supply chain. Watch the full Project Spotlight: 🔗 www.youtube.com/watch?v=gdYl... #OpenSSF #SLSA #OSSSecurity

The November #OpenSSF Newsletter is live. Cyber Week deals, CRA insights, OSFF NYC highlights, new members, podcasts, Zarf, OpenBao, SBOM updates, and more. openssf.org/newsletter/2...

👂 Think you know OpenSSF projects? 🕙 Check out our new “OpenSSF Projects in Less Than 5 Minutes” series. 🌟 Today’s spotlight: #Zarf -- simplifying cloud-native delivery in air-gapped and offline environments. Watch: youtu.be/7uRjBfoGk3Q?...

Hey OpenSSF community, thinking about going to FOSDEM next year? The #FOSDEM2026 devroom CFPs are now open, with just a little over a week left to submit! Submit your proposals here: pretalx.fosdem.org/fosdem-2026

Last week at #KubeCon, Stacey and Adolfo delivered one of the most memorable and entertaining keynotes. This recap breaks down what happened on stage and why it captured so much attention across the conference. Read now: openssf.org/blog/2025/11... #OSSSecurity

SBOM versioning got you twisted? Stephanie Domas digs into patch drift, software sovereignty, EU CRA, and memory-safe sudo-rs in Ubuntu LTS. 🎧 openssf.org/podcast/2025... #OpenSSF

🗣️ Our newest Zarf Tech Talk recap is live! 📹 This Tech Talkbrought together experts from Sonatype, Defense Unicorns, and Boeing to break down one of the biggest challenges in secure software delivery: operating in disconnected or restricted environments. #Zarf #DevSecOps

💬 Last month, LF Europe (@linuxfoundationeu.bsky.social), OpenSSF, and CEPS brought the open source community together in Ghent and Brussels for a full week of conversations on security, collaboration, and Europe’s digital future. Read the recap: openssf.org/blog/2025/11... #OSSSecurity

OpenSSF sponsored OSFF NYC to help the financial sector strengthen its use of open source through practical security guidance. Thank you to the speakers from our community and to FINOS for bringing everyone together. Learn more: openssf.org/blog/2025/11...

News from Open Source #SecurityCon New members: Target and Thread AI Membership upgrade: OSTIF Golden Egg Awards go to Sarah Evans, Justin Cappos, Patrick Zielinski, Evan Anderson and Brandt Keller 🎉 openssf.org/press-releas...

Join us at #KubeCon for a deep-dive on SBOMit -- a build-time technique for generating in-toto attestations and using them to produce SBOMs that don’t miss dependencies. 📅 Tue, Nov 11, 2025 🕑 2:00–5:00 PM 📍 Building B | Level 2 | Room B213 #SBOM #OSSSecurity

How can open source maintainers prove their project’s security posture? 💬 Learn about the OSPS Baseline in our latest What’s in the SOSS? discussion with Ben Cotton & Eddie Knight. openssf.org/podcast/2025... #OpenSSF

ICYMI 👻 Attackers are using AI… and it’s spooky. Great insights from Hugo Huang + Canonical on why securing AI is the next battleground and how open source helps. Read more 👉 openssf.org/blog/2025/08... #OpenSSF

🚨 Zarf Tech Talk happening next Thursday 2PM ET! Join experts from Defense Unicorns, Sonatype, and Boeing next week too see how #Zarf keeps #Kubernetes and cloud-native workloads running smoothly in air-gapped environments. Register: openssf.org/resources/te...

🚨 Zarf Tech Talk happening next Thursday 2PM ET! Join experts from Defense Unicorns, Sonatype, and Boeing next week too see how #Zarf keeps #Kubernetes and cloud-native workloads running smoothly, no connection required. Register: openssf.org/resources/te...

Stay informed in the fast-moving world of open source security. The October #OpenSSF Newsletter covers AI security, SBOM evolution, OpenSSF Scorecard improvements, and upcoming events built for developers. Read the full update: openssf.org/newsletter/2...

📣 Our next Tech Talk is around the corner. Hear from experts from Defense Unicorns, Boeing, and Sonatype as they talk about how OpenSSF project #Zarf simplifies software delivery in disconnected or semi-connected environments. 📅 Sign-up now: openssf.org/resources/te... #openssf

The global push for #SBOM standards is reshaping how we approach cybersecurity and transparency. 🌍 Explore how the EU #CRA, CISA, and @OpenSSF efforts are aligning global software supply chain security. openssf.org/blog/2025/10...

💬 “You are not alone. It’s totally OK to ask for help.” — Seth Larson In this week’s What's In the SOSS podcast, Seth Larson joins host Yesenia Yser to talk about trust, maintainers, and building security together. 🎧 Listen: openssf.org/podcast/2025... #OpenSSFCommunity

❓What’s new in the #OSPS Baseline? The latest release (v2025-10-10) refines guidance across access control, build & release practices, and documentation, making it easier for maintainers to adopt and demonstrate strong security practices. baseline.openssf.org/release_note...

💚 #OSS thrives when communities are welcoming and inclusive. Listen to the latest GR-OSS OUT Podcast from G-Research, Tabatha DiDomenico & Stacey Potter from OpenSSF 🎧 www.youtube.com/watch?v=Us_M...

🚀 Ready to build software securely in the age of AI? #AI code assistants can boost productivity, but they can also introduce real security risks. Earn your digital badge in just one hour and write safer, smarter code. 📘 openssf.org/blog/2025/10... 👉 training.linuxfoundation.org/express-lear...

42 is the answer to life, the universe… and everything. For #OpenSSF, it’s the answer to secure AI development. Listen to What’s in the SOSS? Episode #42 ft. David A. Wheeler + the launch of LFEL1012 🎧 Listen → openssf.org/podcast/2025... 🎓 Enroll → training.linuxfoundation.org/express-lear...

🎉 The new #Sigstore Rekor transparency log public dataset is now available on BigQuery! This dataset makes it easier for researchers to analyze software signing trends & understand how artifacts are signed across the open source ecosystem. 🔗 Read: openssf.org/blog/2025/10...

Heading to #PyTorchCon 2025? Don’t miss our BoF on Applying DevSecOps Lessons to MLSecOps (Oct 23 | 10:30 AM PDT). Join Jeff Diecks + Mihai Maruseac as we explore secure AI/ML development with the OpenSSF AI/ML Security WG. 👉 sched.co/27QQG #OpenSSF #MLSecOps

The @ostifofficial.bsky.social recently completed a security audit of #OpenSSFScorecard. With support from the OpenSSF, this audit covered five core repositories and included threat modelling, manual code review, and fuzz testing. . Read to learn more:🔗 openssf.org/blog/2025/10...

Financial services run on open source, and #OpenSSF is helping make it more secure. At #OSFF, our community is leading sessions on: 🔹 OSPS Baseline 🔹 CVE & vulnerability data 🔹 AI security 📖Read the blog: openssf.org/blog/2025/10...

Security is no longer optional -- it’s essential. Join us at #OpenSource SecurityCon (co-located with #KubeCon + #CloudNativeCon North America 2025) to learn, connect & collaborate on the future of secure software. Read more 👇 🔗 openssf.org/blog/2025/10...