It’s 5:05, on Tuesday, November 1st, 2022. Each day we bring you updates on open source and cybersecurity news that might slip by the major news sources. We have 20 reporters from around the world. Today’s updates are from Kadi Grigg in Alexandria, Virginia, Edwin Kwan in Sydney Australia, and DJ Schleen in Golden, Colorado. Let’s get to it!

• Edwin Kwan - Sydney, Australia
• Thousands of GitHub repositories deliver fake PoC exploits with malware
• https://www.bleepingcomputer.com/news/security/thousands-of-github-repositories-deliver-fake-poc-exploits-with-malware/
• Kadi Grigg - Alexandria, Virginia
• Explore CISA’s 37 steps to minimum cyber security
• https://www.cybersecuritydive.com/news/cisa-cpg-cybersecurity-performance-goals-critical-infrastructure/635224/ 
• DJ Schleen - Golden, Colorado
• Update to Open Source ZAP Tool Improves DAST Performance
• https://devops-com.cdn.ampproject.org/c/s/devops.com/update-to-open-source-zap-tool-improves-dast-performance/amp/

That’s it for today’s open source and cybersecurity updates from around the world. Thank you to Kadi Grigg, Edwin Kwan, and DJ Schleen for today’s contributions. 

For direct links to all stories and resources mentioned in today’s episode, go to  505Updates.com, where you’ll find our entire library of updates. “It’s 5:05” is available on all your favorite audio streaming platforms including Spotify, Apple Podcasts, Audible, Google Podcasts, and Amazon Music. 

Today’s episode was engineered by Pokie Huang, with music by Blue Dot Sessions. We’re here, Monday through Friday. This is Executive Producer, Mark Miller. See you tomorrow… at 5:05.