Skip to main content

Pentagon Targets Open Source Security Risks in Software Procurement Overhaul

1 month 3 weeks ago
The Department of Defense is revamping its "outdated" software procurement systems through a new Software Fast Track initiative. The SWFT program aims to reform how software is acquired, tested, and authorized with security as the primary focus. "Widespread use of open source software, with contributions from developers worldwide, presents a significant and ongoing challenge," DoD CIO Katie Arrington wrote in the initiative memo. The DoD currently "lacks visibility into the origins and security of software code," hampering security assurance efforts. The initiative will establish verification procedures for software products and expedite authorization processes. Multiple requests for information are running until late May seeking industry input, including how to leverage AI for software authorization and define effective supply chain risk management requirements. The push comes amid recent DoD security incidents, from malware campaigns targeting procurement systems to sensitive information leaks.

Read more of this story at Slashdot.

msmash

Microsoft moved the goalposts once. Will Windows 12 bring another shift?

1 month 3 weeks ago
Windows 11's hardware requirements: Sales ploy or security play?

Comment  Retired Microsoft engineer Dave Plummer has weighed in on the increasingly heated discussion regarding the impending end of Windows 10. Are Windows 11's hardware requirements all about security or just a sales ploy in disguise?…

Richard Speed