Recent AI capabilities in Cyber, like „hacking“ and even finding new vulnerabilities in source code, sparked a discussion on Open Source Software Security again. OSS projects get overwhelmed by real and false alarms on new critical bugs. But the arguments are old: security by obscurity was never a good idea. However, we have to care about secure software architectures and development processes in OSS projects more than ever.
