OpenRefactory

Aug ’25: AI traced CVEs to root cause functions. Rust & Java :white_check_mark:, Ruby :warning:. Data gaps caused most fails. Updated agent (Nov) is stronger—new results soon. #Cybersecurity #AIsecurity #CVE #LLM openrefactory.com/measuring-the-…

🎉 Rust turns 10 today! 🦀 From the birth of Ferris the crab to powering safe, fast systems—what a journey. We're celebrating: iCR now supports Rust, finding bugs others miss. Try it: info@openrefactory.com #RustLang #Rust10 #FerrisTheCrab #SecureCode

Winter is coming!! You need signals about unknown bugs in your code more than ever before! Not just signals but better signals than just known CVEs from the past securityonline.info/severe-unauthe…

I'm excited to speak at Open Source Summit Europe 2024 osseu2024.sched.com/event/15e510f6… @sched

@ZephyrIoT @intel @LinaroOrg @muna_haf

At #EmbeddedOSSummit, experts from @openrefactory, @intel & @LinaroOrg presented deep insights on #ZephyrRTOS based security audits & vulnerability management. Read the abstract blog and watch the talks by Munawar Hafiz, Flavio Ceolin, & David Brown here: hubs.la/Q02HGcTb0

View my verified achievement from @linuxfoundation. credly.com/badges/998caef…

Thank you @openssf and @alphaomega Our @muna_haf and @Fazledyn are finding and fixing bugs at scale in open source projects, so far have triaged 1,079 open source projects and submitted 168 bug reports. lnkd.in/gZ5ePK5R #oss #osssecurity

Thanks for @AlphaOmegaOSS for the support.

I'm excited to speak at Open Source Summit Japan 2023 ossjapan2023.sched.com/event/bcff0e0d… #OSSummit @sched

@Kate_Catlin Great work ! We may be the first team to consume this outside of GitHub.

Now live, the ability to open up temporary private forks on GitHub security advisories via API! Imagine a world where security researchers can remediate vulnerabilities in bulk across hundreds repositories. That's what we're working towards! github.blog/changelog/2023…

Arafat Tanin writes about how small mistakes in Java Serialization can cause big problems. This is a part of a series of posts on small mistakes in code that can hurt big time. The work is done with support from @AlphaOmegaOSS and @openssf openrefactory.com/crash-boom-ban…

Red Hat Trusted Application Pipeline will be a game changer in building secure and trusted DevOps pipeline. We are happy to be involved. #redhatsummit2023 lnkd.in/gSxrJiXN

Red Hat Trusted Application Pipeline is here. #redhatsummit2023 lnkd.in/gHesKnnr

Today's keynote from red hat summit. #redhatsummit2023 lnkd.in/gdaUejVj

Looking forward to Red Hat Summit starting from tomorrow. #redhatsummit lnkd.in/gfCXDMyW

I’m speaking at #OpenSSFDay on May 10th hosted by @theopenssf in Vancouver. Join me at the event: events.linuxfoundation.org/openssf-day-no…

I’m speaking at OpenSSF Day on May 10th hosted by the @OpenSSF in Vancouver. Join me at the event: #OpenSSFDay #OSSummit lnkd.in/gMsmaXba

Our Founder, Dr. Munawar Hafiz @muna_haf will be speaking at a Panel Discussion on #alphaomega: Securing #OpenSourceSoftware Through Direct Maintainer Engagement during the #OpenSSFDayNorthAmerica on 10th May 2023 in Vancouver, BC, Canada. #DevSecOps #icr cutt.ly/J6qDsE4

I want to get your thoughts on a couple of things. Think of a company writing proprietary code. For something like GitHub Copilot X, do you think that people will be worried about sharing their code snippets when they are asking questions to large langu…lnkd.in/gGvFMR4a