Elektrine lite

← Feed

@ekZepp@lemmy.world

Linux Foundation and Industry Leaders Launch Akrites to Defend Critical Open Source Software Against AI-Enabled Cyber Threats

2026-06-28 19:51 UTC

Summary The Linux Foundation, joined by leading organizations, today announced Akrites, a coordinated effort to remediate and disclose vulnerabilities in critical open source software. Akrites establishes a shared Security Incident Response Team (SIRT) and a single, standardized Coordinated Vulnerability Disclosure (CVD) process, built on confidentiality-first principles and industry-standard tooling. Founding members commit engineering talent, security expertise and funding to harden the shared open source software that banks, hospitals, power grids, telecoms, governments, and AI labs depend on. Organizations that contribute engineering resources or funding to the security of critical open source are invited to participate and can learn more at akrites.org.

Replies (4)

  • @ell1e@leminal.space 2026-06-28 23:56

    I wish they would stop putting AI code into the kernel though. That also appears to be degrading security, among many other issues.

    Open ##3457712

  • @markstos@lemmy.world 2026-06-29 00:29

    It’s nice that some resources are being directed in this area, but it’s far from a total solution. For example, the passport-saml Node module is popular and security related and is already fielding a number of AI-assisted security vulns. Even when they are contributed by “security experts”, they still have to be carefully vetted to confirm they are correct and not themselves malicious. While the patches may be good, it appears to be generating more unpaid volunteer labor for the maintainers. Thankfully there some other fund’s trying to help out maintainers of critical open source projects.

    Open ##3458087

  • @corsicanguppy@lemmy.ca 2026-06-29 04:33

    Akrites establishes a shared Security Incident Response Team (SIRT) and a single, standardized Coordinated Vulnerability Disclosure (CVD) process, built on confidentiality-first principles and industry-standard tooling. Soo XKCD 927?

    Open ##3463300

  • @motruck@lemmy.zip 2026-06-29 04:59

    These are all grifts by the Linux foundation in concert with corporations to still not pay for open source development.

    Open ##3463508