The Linux Foundation and roughly 20 companies, AI labs, and banks have formed Akrites to identify and patch vulnerabilities in critical open-source software before AI-powered attacks can exploit them.
The initiative addresses growing concerns about AI tools being weaponized to discover and weaponize zero-day flaws in widely-used open-source projects. Akrites focuses on proactive vulnerability remediation in foundational software that underpins modern technology infrastructure.
The collaboration brings together major technology firms, artificial intelligence research organizations, and financial institutions to share threat intelligence and coordinate patching efforts. By pooling resources and expertise, participants aim to close security gaps faster than malicious actors can discover them.
The move reflects heightened awareness that open-source software—often developed with limited security resources—faces new risks as AI capabilities advance. Critical vulnerabilities in popular libraries and frameworks can cascade across thousands of dependent projects and organizations.
Akrites' model emphasizes responsible disclosure and coordinated response, enabling fixes to reach production systems before public exposure. The effort underscores industry recognition that traditional vulnerability management timelines may prove insufficient against AI-accelerated threat discovery.
A study found that 86% of licensed British gambling websites violate GDPR privacy requirements, using deceptive cookie banners to track users before obtaining consent.
Berlin's government is intensively reviewing 5.79TB of state data released by ransomware group Rhysida after refusing to pay a ransom demand. The leaked files reportedly contain sensitive information on national defense and threat response plans.
Cybercriminals are exploiting thousands of compromised small-business websites to distribute ClickFix malware payloads stored in smart contracts on the BNB Smart Chain, amplifying the reach of a known threat.
Quad9 provides an open DNS recursive service that prioritizes user privacy and security at no cost. The service blocks malware and phishing domains while maintaining minimal data collection.