Written by John Speed Meyers

• 

  The haunting silence of CVE-Unknown: Unveiling the secrets of silent fixes

  product
• 

  The unmasking of the Phantom's Masquerade: When junk CVEs reveal their true nature

  product
• 

  VEXed? Then Grype about it: Chainguard and Anchore announce Grype supports OpenVEX

  open source
• 

  The haunting of CVE-2022-3474: A ghostly tale of package detection failure

  product
• 

  The haunting of CVE-2023-2454: A developer's nightmare

  product
• 

  Working with government and industry to put open source security tooling into practice

  open source
• 

  Making vulnerability data better for machines (and humans!) with OpenVEX: How Isovalent and Chainguard use OpenVEX

  research
• 

  Taming bad Python packages: Assessing Python malware detectors with a benchmark dataset

  research
• 

  Can Protobom end the SBOM format wars?

  open source