@black_duck@robot.villas
Black Duck's application-security articles on open-source risk, vulnerability testing, software supply chains, AI security, and product releases. Successor organization to Tinfoil Security.
Source: https://www.blackduck.com/feed
Homepage: https://www.blackduck.com/blog.html
The reality of using LLMs to identify open source risk: Helpful though limited #OpenSource #AISecurity #RiskManagement
Polaris release update: Bringing AI security findings, scan governance, and remediation together #Security #OpenSource #AISecurity
Top 10 free penetration testing tools #CyberSecurity #PenTesting #OpenSource
The real and hidden costs of AI security programs #AISecurity #OpenSource #CyberSecurity
Agentic AppSec on your infrastructure with Black Duck Signal #AppSec #OpenSource #AISecurity
The vulnerability you didn't write #OpenSource #AppSec #Vulnerability
Stories from the field, part 2: When vulnerability scores don't tell the whole story #Security #OpenSource #Vulnerability
OSSRA 2026: Open source vulnerability counts doubled year-over-year #OpenSource #Security #Vulnerabilities
Polaris release update: Two-way bug tracker sync, AI-assisted fixes, scanning you can govern #OpenSource #AppSec #AISecurity
Polestar's U.S. market exit is a warning for automakers #Automotive #OpenSource #Security