Linux Foundation Launches Akrites to Defend Open-Source From AI Threats

The Linux Foundation launched Akrites, a coalition including Anthropic, AWS, IBM, Microsoft, Nvidia, OpenAI, and others, to defend open-source software from AI-driven vulnerability discovery. The group will fund a shared incident response team and coordinated disclosure process, as AI scanning has uncovered tens of thousands of unpatched flaws in open-source projects.

For engineering teams that depend on open-source components, the security math just changed: frontier AI models now surface vulnerabilities faster than volunteer maintainers can triage them, turning the software supply chain into a widening exposure. A coalition organized by the Linux Foundation, called Akrites, is the industry's first coordinated attempt to close that gap. According to the group, founding members including Anthropic, AWS, IBM, Microsoft, Nvidia, OpenAI, Cisco, Citi, JPMorgan Chase, and Ericsson will fund a shared incident response team and a coordinated vulnerability disclosure process, with seed money from Alpha Omega, a Linux Foundation directed fund. Christopher Robinson of the Open Source Security Foundation said upstream projects are being inundated with vulnerability reports that exceed volunteer developers' capacity to evaluate them. The move follows reports that AI-driven scanning uncovered tens of thousands of flaws across open-source projects in recent months, most still unpatched.