In open source news this week: Heartbleed still hurts, Honda shuts down a car plant due to WannaCry, the Girl Scouts are offering cybersecurity badges and more.

1. Open Source Insight:
Heartbleed Results in £100,000 fine,
WannaCry Hits Japan, Malware Targets Restaurants
By Fred Bals, Senior Content Writer & Editor

2. Cybersecurity News This Week
The patch for CVE-2014-0160, better known as
Heartbleed, has been available since 2014, however
some applications continue to include vulnerable
versions of OpenSSL (versions 1.0.1-1.0.1f), making
Heartbleed still one of the most dangerous
vulnerabilities in the wild, as one local authority in the
UK learned.
In other cybersecurity and open source news: Honda
shuts down a car plant due to WannaCry. The
potential risks of open source are broader than just
license compliance. Girl Scouts to offer cybersecurity
badges. And even restaurants aren’t safe from malware.

3. • Honda Halts Japan Car Plant After WannaCry Virus Hits Computer
Network
• GDPR, OpenSSL, Heartbleed and a Cascade of Security Breaches
• Hackers, Beware! Girl Scouts To Offer Cybersecurity Badges
• Why The Last Thing Open Source Needs Is More Corporate
Oversight
• 3 Examples of Why Permissive Licenses Deserve a Little Respect
• Black Duck Selected as a 2017 US-Ireland Top 50 Company
• Fileless Malware Targeting US Restaurants Went Undetected by
Most AV
• A Cyberattack ‘the World Isn’t Ready For’
Open Source News

4. Honda Halts Japan Car Plant After WannaCry Virus
Hits Computer Network
via Reuters: Honda discovered on Sunday that the virus had
affected networks across Japan, North America, Europe, China and
other regions, a spokeswoman said, despite efforts to secure its
systems in mid-May when the virus caused widespread disruption at
plants, hospitals and shops worldwide.

5. via Black Duck blog (Fred Bals): Even
though Heartbleed was discovered over
three years ago, and IT staff at the council
flagged the need to update the software, a
patch issued for the software was never
applied. Gloucester City Council “did not
have sufficient processes in place to ensure
its systems had been updated while changes
to suppliers were made,” said the entity
imposing the £100,000 fine, UK's Information
Commissioner's Office (ICO).
GDPR, OpenSSL, Heartbleed and a
Cascade of Security Breaches

6. via USA TODAY: Girl Scouts of the USA and Palo
Alto Networks have announced a collaboration
to introduce a series of 18 cybersecurity badges
for girls K-12. The badges, which will help
Scouts explore opportunities in STEM (science,
technology, engineering and math) while
building leadership skills, will be available to
earn beginning in September 2018.
Hackers, Beware! Girl Scouts To Offer
Cybersecurity Badges

7. Why The Last Thing Open Source Needs Is
More Corporate Oversight
via TechRepublic: According
to a new Black Duck survey,
developers can't get enough of
open source, ramping up open
source adoption by 60% last
year. Why the uptick? A
whopping 84% cited superior
cost savings, ease-of-access,
and no vendor lock-in.

8. via ZDnet: Released on Thursday, the survey,
made up of 819 US and EMEA software
developers, IT professionals, security experts,
and systems architects, says that in the last year
there has been a significant uptake in the use of
open-source software with almost 60 percent of
respondents saying their organizations make
use of open-source community-based
development.
Open-source Software Management
Fails to Meet Security Concerns

9. 3 Examples of Why Permissive
Licenses Deserve a Little Respect
via Black Duck blog (Phil Odence): To the extent that tech
companies manage open source risks, their primary focus tends to
be on reciprocal licenses and the GPL in particular. As I've
discussed earlier, the potential risks of open source are broader
than just license compliance. Additionally, there are other licenses
to consider beyond the GPL. Even permissive licenses deserve a
little respect.

10. viaTechBuzzIreland: Black Duck Software
has been named a US-Ireland Top 50
Company by The Irish Echo, the USA’s
largest and most widely read Irish American
weekly. Black Duck was presented with the
award honoring 50 major companies with
operations in the US and Ireland during the
New York/New Belfast Investment
Conference at Pier A, Harbor House in New
York City.
Black Duck Selected as a 2017 US-Ireland
Top 50 Company

11. Fileless Malware Targeting US Restaurants
Went Undetected by Most AV
via Ars Technica: Researchers have detected a brazen attack on
restaurants across the United States that uses a relatively new
technique to keep its malware undetected by virtually all antivirus
products on the market.

12. via NY Times: “I don’t pursue every attacker,
just the ones that piss me off. This pissed me off
and, more importantly, it pissed my wife off,
which is the real litmus test.”
A Cyberattack
‘the World Isn’t Ready For’

13. Subscribe
Stay up to date on open source security and cybersecurity –
subscribe to our blog today.