Analysis shows most security risk sits in longtail open source images, with 98% of CVEs outside top projects & Critical flaws ...

Caught before it could do widespread damage, the sophisticated vulnerability could have been one of the highest-impact software supply chain breaches to date.

Linux and open source are also on track to become more secure in 2026, as the ecosystem simultaneously hardens the kernel, professionalizes supply-chain defenses, and scales coordinated security ...