Linux Foundation Launches 'Akrates' Initiative for Joint Open-Source Vulnerability Patch Response

The Linux Foundation has launched the 'Akrates' initiative to efficiently address vulnerabilities in the open-source software ecosystem, as reported by SecurityWeek. Akrates focuses on releasing patches before publicizing discovered vulnerabilities, with participation from major companies including Anthropic, AWS, ChainGuard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorgan Chase, Microsoft/GitHub, NVIDIA, OpenAI, RapidFire Technologies, Red Hat, Rust Foundation, Sonatype, Vodafone, and ZScaler. Initial funding comes from the Linux Foundation Alpha-Omega Directed Fund. The initiative emphasizes deploying patches before vulnerability disclosures, responding to the shrinking gap between vulnerability exposure and AI-driven cyber attacks. The Linux Foundation stated that attackers can rapidly develop exploits using AI once patches are published, making patch deployment the key metric for Akrates success.