Maintaining Container Images: More Security, Less Toil

Maintaining Container Images: More Security, Less Toil

Containers fueled by open source software have become the de facto way for software development teams to package and deploy modern applications and services. Docker, Kubernetes and other open source tools provide a robust foundation for the container ecosystem. However, as Pete Garcin and Evan Prowse of ActiveState explained in a recent webinar with The New Stack, open source software running in containers is potentially risky. Pulling prebuilt …

Researchers uncover flaw in Open VSX Registry, exposing developer extensions to takeover

Cybersecurity researchers discovered a flaw in the Open VSX Registry that could have enabled full control over the extensions ecosystem.

Critical Open VSX Registry Flaw Exposes Millions Of Developers To Supply Chain Attacks - Cybernoz - Cybersecurity News

Jun 26, 2025Ravie LakshmananOpen Source / Vulnerability Cybersecurity researchers have disclosed a critical vulnerability in the Open VSX Registry (“open-vsx[.]org”) that, if successfully exploited, could have enabled attackers to take control of the entire Visual Studio Code extensions marketplace, posing a severe supply chain risk. “This vulnerability provides attackers full control over the entire extensions marketplace, and in turn, full …

Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

Cybersecurity researchers have disclosed a critical vulnerability in the Open VSX Registry ("open-vsx[.]org") that, if successfully exploited, could have enabled attackers to take control of the entire Visual Studio Code extensions marketplace, posing a severe supply chain risk. "This vulnerability provides attackers full control over the entire extensions marketplace, and in turn, full control

DHS/ALL/PIA-098 Cybersecurity Supply Chain Risk Management Support Activities

DHS/ALL/PIA-098 Cybersecurity Supply Chain Risk Management Support Activities jovaun.holmes Wed, 06/25/2025 - 10:39 Body The U.S. Department of Homeland Security and its Components perform research activities in support of the U.S. Department of Homeland Security Enterprise Cybersecurity Supply Chain Risk Management Program—a standardized program to assess cybersecurity supply chain risks that could negatively impact the trustworthiness, securi…