Is FOSS secure by default?

Unfortunately a lot of people equate a lack of software vulnerabilities with security. Here in South Africa we are trying to help institutions to make good choices around FOSS (Fee and Open Source Software) and security looking at policies, procedures, standards and guidelines and how they apply to FOSS.

If you think tha FOSS is secure by default please read the following article which highlights one reason why we cannot just trust without knowing and understanding:

Attacks on Package Managers