Open Source Security podcast artwork
Technology

Open Source Security

by Josh Bressers

Chart positions today · New Zealand

Not on the New Zealand charts we track today.

If you like Open Source Security, try…

Latest episodes

  • Half of the AI patches don't work with Keith Hoodlet

    October 12, 2026 · 36 min

    Josh talks to Keith Hoodlet about a research project he co-authored about the success rate of AI generated vulnerability patches. Keith has a very scientific approach to this paper and does a great job of breaking down all the data and…

  • Dependency attacks in 2026 with James Matchett

    October 5, 2026 · 32 min

    Josh chats with James Matchett from Cloudsmith about a new report they put out. It has some scary looking statistics in it about how organizations are using dependencies. There are some surprising numbers in there, but the story is really…

  • Sovereignty, policy, and OpenUK with Amanda Brock

    September 28, 2026 · 35 min

    Josh welcomes Amanda Brock from OpenUK to chat about sovereignty, policy, open source, and a whole host of other topics. Amanda has front row seat into how sovereignty decisions can affect a county and its open source. It seems sometimes…

  • The curl summer of Bliss with Daniel and Stefan

    September 21, 2026 · 33 min

    Josh chats with Daniel and Stefan from curl about their summer of bliss. Curl stopped taking vulnerability reports for a month and nothing much happened really. Daniel and Stefan have a really pragmatic view of all the new LLM powered…

  • CRA vulnerability reporting with Daniel Thompson

    September 14, 2026 · 41 min

    Josh welcomes back Daniel Thompson to explain what just happened regarding vulnerability reporting and the CRA on September 11. The very first CRA requirements kicked in, but what does it really mean? Daniel explains it's not too bad…

Show 7 more episodesShow fewer episodes
  • Finding difficult vulnerabilities with Jaya Baloo from AISLE

    September 7, 2026 · 29 min

    Josh chats with Jaya Baloo from AISLE about their vulnerability scanner. If you follow open source vulnerabilities AISLE is a name you've seen popping up recently. They have a vulnerability scanner that is outperforming most of the…

  • Sovereign Tech Agency with Erik Möller

    August 31, 2026 · 36 min

    Josh chats with Erik Möller from the Sovereign Tech Agency about what they're doing. The Sovereign Tech Agency is doing some amazing work around funding open source maintainers and projects. Eric breaks down what they're doing, how it…

  • CVEs vs Advisories with Paul Asadoorian

    August 24, 2026 · 38 min

    Josh chats with Paul Asadoorian about a tool he wrote called fettle and a recent report Paul published on CVEs. Fettle is a tool to help update and manage Linux systems. The big sell on this one is checking if your firmware is out of date…

  • Maintaining EOL Open Source with Commonhaus and HeroDevs

    August 17, 2026 · 34 min

    Josh chats with Erin Schnabel and Rob Nalen about a new effort from Commonhaus and HeroDevs for maintaining end of life open source. This project, the Open Source Sustainability Initiative is a clever way to bring corporations and projects…

  • Cleanup, Speedup, Levelup open source at e18e

    August 10, 2026 · 35 min

    Josh chats with James from e18e. This is a project that is working on improving Javascript packages by cleaning up, speeding up, and leveling up the dependencies. The way the e18e project handles this work is very human open source. It's…

  • VulnCheck's State of Exploitation Report with Patrick Garrity

    August 3, 2026 · 37 min

    Josh chats with Patrick Garrity about the VulnCheck State of Exploitation 1H-2026 report. Patrick explains the current trends we are seeing around vulnerabilities right now. While the number of CVEs is way up, the number of actually…

  • Securing critical infrastructure with Josh Corman

    July 27, 2026 · 36 min

    Open Source Security welcomes Josh Corman to talk about the challenges around securing our critical infrastructure. Specifically the discussion centers around our water supplies. There are a lot of really wild things happening right now…

Full episode archive on Apple Podcasts →

About the show

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works. There's a lot of good work happening that doesn't get attention because there's no marketing department behind it, they don't have a developer relations team posting on LinkedIn every two hours. Let's focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what's up, they have a lot to teach us. We just have to listen.