TLDR Tech / InfoSec
Chainguard, JPMorgan, BNY Team Up to Secure Open Source from AI Threats
Chainguard launched Athena, an industry coalition (founding members include BNY, Cisco, Cloudflare, Docker, JPMorganChase, Kyndryl, LTIMindtree, and PwC) that pools open-source vulnerabilities surfaced by frontier AI programs like Anthropic's Project Glasswing and OpenAI's Daybreak, patches them privately, and rebuilds affected projects as hardened versions in Chainguard Libraries ahead of coordinated upstream disclosure. Infrastructure-operating members push non-patch mitigations before disclosure so coverage exists even where no clean patch yet does, with the model pitched as the “AI cybersecurity clearinghouse” the US government was tasked to build under the June 2 executive order. Already operational, Athena has processed over 20,000 findings and shipped more than 2,000 patches across 500 open-source projects, with its first disclosure wave due in July.
Read the full story