Over two dozen companies, including JPMorgan Chase, Cisco, and Cloudflare, have formed Athena, a new coalition aimed at securing open-source software using artificial intelligence to identify and fix vulnerabilities.
The alliance brings together major technology and financial institutions with cybersecurity specialists to address the growing risks posed by flaws in open-source code. Chainguard, a cybersecurity startup, is leading the effort alongside prominent firms across infrastructure, finance, and security sectors.
Athena will leverage AI technology to detect software vulnerabilities more efficiently and at scale. The coalition represents a coordinated response to supply chain security threats, as organizations increasingly rely on open-source components that often lack adequate security resources.
Open-source software underpins much of modern infrastructure, yet many projects operate with limited funding and maintainer capacity. The coalition's formation signals growing recognition among enterprise leaders that proactive investment in open-source security benefits the broader ecosystem.
The initiative joins other efforts to strengthen software supply chain security, a priority that has gained urgency following high-profile breaches and government mandates for improved software security standards.
Security researchers have identified potential hardware backdoors in certain x86 processors. The findings, detailed in a GitHub repository called Rosenbridge, reveal vulnerabilities at the processor level that could allow unauthorized access.
Flock Safety, the traffic camera company, is expanding beyond law enforcement with plans to deploy dashcams in rideshare vehicles and offer coaching services to police departments.
A sharp rise in explicit deepfake images of UK children has been reported by an online safety service, as authorities warn that AI tools are making the creation of sexualized or 'nudified' content increasingly accessible.
Gen's latest threat report details two distinct attack campaigns exploiting compromised email accounts and clipboard manipulation to steal from businesses and cryptocurrency users.