It's 5:05 on Thursday, November 10th, 2022. This is your daily update of open source and cybersecurity news that might have slipped by the major news sources. We have 20 reporters from around the world. Today's updates are from Edwin Kwan in Sydney, Australia. Mark Miller in New York City, DJ Schleen in Golden, Colorado and Olimpiu Pop from Transylvania, Romania. Let's get to it.

Stories covered in this episode

DJ Schleen, Golden, Colorado

Peloton, Spotify, Intel, Oracle, Equifax, Microsoft, loom, Zillow, Synk, Open Door, Twitter, Zendesk, Salesforce, and Meta. What do these companies have in common? Laying off tens of thousands of employees in the last 30 days, and they're not the only ones.

Olimpiu Pop, Transylvania, Romania

Sigstore announced the general availability of its ecosystem agnostic, no cost signing service during the inaugural SigStoreCon in late October. Sigstore, a newly accepted Linux Foundation project, is a critical and much needed step towards accessible software signing, which has become a key component of software supply chain management, and security.

Mark Miller, New York City

One of the people I check in with on a regular basis is Allan Friedman. Allan is leading CISA's efforts to coordinate SBOM efforts inside and outside the United States government. When he points out an article, you can be sure there's value in it. This morning he highlighted an article by Eric Goldstein, Executive Assistant Director for the Cybersecurity and Infrastructure Security Agency.

Edwin Kwan, Sydney, Australia

Experts are urging for cybersecurity to be taught to kids as young as five years old. There's been a huge increase in the number of data breaches being reported in Australia in the last few weeks. While the Australian government is making improvements to national cybersecurity and increasing financial penalties for companies, cybersecurity experts are urging that more needs to be done to raise the nation's security awareness.