https://bsky.app/profile/ostifofficial.bsky.socialhttps://bsky.app/profile/ostifofficial.bsky.social/post/3mqph3nkqps24Our Q2 2026 Community Spotlight is Antonela Conti! Antonela works for #X41D-Sec as a Project Manager and Admin. Read more about her work in open source in her own words: https://ostif.org/q2-2026-community-spotlight/15 Jul 2026 19:23 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mqph3nkqps24https://bsky.app/profile/ostifofficial.bsky.social/post/3mqjyrczmdk2tWe are proud to share the results of our security audit of PyTorch ExecuTorch. Thanks to @trailofbits.bsky.social and Alpha-Omega, this project underwent a custom engagement of security review and testing. Read more on our blog- https://ostif.org/pytorch-executorch-audit-complete/ #OSTIF #PyTorch #TrailofBits #AlphaOmega13 Jul 2026 15:24 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mqjyrczmdk2thttps://bsky.app/profile/ostifofficial.bsky.social/post/3mpycs4mslc25We are proud to share the results of our security audit of #Cortex. Thanks to @quarkslab.bsky.social and the @cncf.io, Cortex received custom review and documentation for current and future security development. Read more about the work on our blog: https://ostif.org/cortex-audit-complete/ #OSTIF #Quarkslab #CNCF06 Jul 2026 14:35 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mpycs4mslc25https://bsky.app/profile/ostifofficial.bsky.social/post/3mpj7cotsqc2oWe are proud to share the results of our security audit of @symfony.com Symfony-YAML. Thanks to @shielder.com and @sovereign.tech, this project received custom security review to further harden the project against risk. Read more on our blog: https://ostif.org/symfony-yaml-audit-complete/ #symfony #OSTIF #shielder30 Jun 2026 14:23 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mpj7cotsqc2ohttps://bsky.app/profile/ostifofficial.bsky.social/post/3mpgrci5ep22p#KEDA is an open source project for scaling containers in Kubernetes. With the help of #7ASecurity and @cncf.io, this project underwent a pentest and whitebox security review and audit. Read more on our blog: https://ostif.org/keda-audit-complete/29 Jun 2026 15:07 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mpgrci5ep22phttps://bsky.app/profile/ostifofficial.bsky.social/post/3mp27nmouhc2lWe are proud to share the results of our security audit of Kubeflow. Thanks to ADA Logics and the @cncf.io, Kubeflow underwent a custom security engagement that audited 6 projects in the Kubeflow ecosystem. Read more on our blog: https://ostif.org/kubeflow-audit-complete/ #OSTIF #Kubeflow #CNCF #Adalogics24 Jun 2026 15:19 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mp27nmouhc2lhttps://bsky.app/profile/ostifofficial.bsky.social/post/3mnufxjyy522jReleasing today is OSTIF's work on LLVM's BOLT binary scanner. Completed thanks to @quarkslab.bsky.social and @sovereign.tech, the BOLT scanner received custom work to extend its coverage further. Read about the work and its implications at our blog: https://ostif.org/bolt-security-engagement-complete/ #OSTIF #llvm #BOLT09 Jun 2026 14:31 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mnufxjyy522jhttps://bsky.app/profile/ostifofficial.bsky.social/post/3mnad2yqtc222The Open Source Technology Improvement Fund is proud to share the results of our security audit of Scala, executed by a team of 3 auditors from Quarkslab. We want to thank our own Derek Zimmer of OSTIF for advocating for this audit for a long time! #OSTIF #Quarkslab #SovereignTechAgency #Scala01 Jun 2026 14:46 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mnad2yqtc222https://bsky.app/profile/ostifofficial.bsky.social/post/3mmr6fhybb222During a security audit of vLLM managed by OSTIF.org, a bug was discovered through manual analysis by a senior security expert at X41 D-Sec. #OSTIF #BadHost #vLLM #X41DSec26 May 2026 14:12 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mmr6fhybb222https://bsky.app/profile/ostifofficial.bsky.social/post/3mlnx7iphok25In 2023, DARPA announced a two-year long competition called the Artificial Intelligence Cyber Challenge (AIxCC), a massive undertaking by dozens of organizations with the goal to safeguard open source software used in critical infrastructure throughout America. #OSTIF #DARPA #OpenSSF #AI12 May 2026 14:00 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mlnx7iphok25https://bsky.app/profile/ostifofficial.bsky.social/post/3ml4f2ppkt223Voila- the results of OSTIF's security audit of #Paramiko! Thanks to the contributions of @quarkslab.bsky.social and @openssf.org Alpha-Omega, this project received custom security work. Read about the Python implementation of the SSHv2 protocol at our blog: https://ostif.org/paramiko-audit-complete/05 May 2026 14:20 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3ml4f2ppkt223https://bsky.app/profile/ostifofficial.bsky.social/post/3mkpsvrb65223We're proud to share the results of our audit of #LibVLC, performed by @trailofbits.bsky.social with support from @sovereign.tech! LibVLC received scoped security work, custom tools and fixes, and documentation for future development. Read more about it on our blog: https://ostif.org/libvlc-audit-complete/30 Apr 2026 14:24 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mkpsvrb65223https://bsky.app/profile/ostifofficial.bsky.social/post/3mkpsc6zwbk2kWe're excited to announce the results of our audit of Inspektor Gadget! With the help of @shielder.com and the @cncf.io, this project received a security audit reviewing Inspektor Gadget’s core components. Read more about the work done on our blog: https://ostif.org/inspektor-gadget-audit-complete/30 Apr 2026 14:13 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mkpsc6zwbk2khttps://bsky.app/profile/ostifofficial.bsky.social/post/3mkkvsshu3k2iOur security audit of PyPI projects Requests, CacheControl, and urllib3 was executed by @7asecurity.bsky.social with funding provided from @openssf.org Alpha-Omega. Read more about this engagement on our blog: https://ostif.org/requests-cachecontrol-urllib3-audits-complete/28 Apr 2026 15:32 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mkkvsshu3k2ihttps://bsky.app/profile/ostifofficial.bsky.social/post/3miygyrzwws2nThe Open Source Technology Improvement Fund is proud to share the results of our security engagement on Developing ECH for OpenSSL (“DEfO”). https://ostif.org/defo-audit-complete/ #OSTIF #DEfO #AdaLogics #7ASecurity #SovereignTechAgency08 Apr 2026 13:54 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3miygyrzwws2nhttps://bsky.app/profile/ostifofficial.bsky.social/post/3mhb5tfsmcc2kWe are proud to announce our top 3 bugs of the year on our blog: https://ostif.org/bug-of-the-year-award-2025/ #OSTIF #BOTY #7ASecurity17 Mar 2026 14:14 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mhb5tfsmcc2khttps://bsky.app/profile/ostifofficial.bsky.social/post/3mgpntx2c2c2iMiss our last OSTIF meetup? You can catch the recording here of Robin David, Software Security Researcher and Research Lead at Quarkslab, presenting "Bitcoin Core Audit: From Static Review to Fuzzing — Inside Bitcoin’s Testing Infrastructure". https://www.youtube.com/watch?v=J1Y1EJmtX_Q #OSTIF #bitcoin10 Mar 2026 15:12 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mgpntx2c2c2ihttps://bsky.app/profile/ostifofficial.bsky.social/post/3mg642h3pak2vDon't miss tomorrow's OSTIF meetup with Robin David, Software Security Researcher and Research Lead at Quarkslab, presenting "Bitcoin Core Audit: From Static Review to Fuzzing — Inside Bitcoin’s Testing Infrastructure". luma.com/gjnorzq0 #OSTIF #OpenSource #bitcoin https://luma.com/gjnorzq003 Mar 2026 15:39 +0000at://did:plc:lyput76wu3avbxuadvwc7wmm/app.bsky.feed.post/3mg642h3pak2v