As many as 96 per cent of vulnerabilities in open source software are because developers use an outdated, or unpatched version of the code.

And this matters, because open source is now the building block of almost all enterprise software, web applications, and even the code that runs consumer technology.

But open source can be secure. It just needs developers, and the organisation they work for, to think about security throughout the software lifecycle.

With guest Brian Fox, CTO and co-founder at Sonatype.