The XZ attack is a backdoor that reminds us our biggest open-source security threats are from decades of unlearned lessons.

From reducing third-party risks to enlisting AI for threat detection at scale, 2025’s award-winning projects underscore the ...

Peer reviewers judge the validity and quality of new research. These judgements would ideally be impartial, but some reviewers may give a more favourable review if they are cited in the article ...