Over two dozen companies, including JPMorgan Chase, Cisco, and Cloudflare, have formed Athena, a new coalition aimed at securing open-source software using artificial intelligence to identify and fix vulnerabilities.
The alliance brings together major technology and financial institutions with cybersecurity specialists to address the growing risks posed by flaws in open-source code. Chainguard, a cybersecurity startup, is leading the effort alongside prominent firms across infrastructure, finance, and security sectors.
Athena will leverage AI technology to detect software vulnerabilities more efficiently and at scale. The coalition represents a coordinated response to supply chain security threats, as organizations increasingly rely on open-source components that often lack adequate security resources.
Open-source software underpins much of modern infrastructure, yet many projects operate with limited funding and maintainer capacity. The coalition's formation signals growing recognition among enterprise leaders that proactive investment in open-source security benefits the broader ecosystem.
The initiative joins other efforts to strengthen software supply chain security, a priority that has gained urgency following high-profile breaches and government mandates for improved software security standards.
Gen's latest threat report details two distinct attack campaigns exploiting compromised email accounts and clipboard manipulation to steal from businesses and cryptocurrency users.
Two security researchers purchased commonly-used generic email domains and discovered hundreds of companies automatically sending sensitive corporate data to their listening services. The experiment reveals a widespread failure in email configuration practices across organizations.
Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.
A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.