Open-source security rests on understanding risks, scaling fixes Cybersecurity Dive