Tech Firms Pledge $12.5M for Open Source Security

Major technology companies including Anthropic, Amazon Web Services, GitHub, Google, Microsoft, and OpenAI have collectively pledged $12.5 million to bolster the security of open source software, addressing the surge in low-quality vulnerability reports generated by artificial intelligence tools. The announcement, made through the Linux Foundation, targets initiatives under the AlphaOmega Project and the Open Source Security Foundation to support maintainers worldwide.

The funding responds to growing pressures on open source projects, where AI-driven tools have accelerated the discovery of potential vulnerabilities but also inundated teams with automated, often unreliable reports known as "AI slop." These submissions, frequently vague, duplicate, or incorrect, strain the limited resources of volunteer maintainers who oversee critical software components used in banks, hospitals, and everyday applications. Nearly 90 percent of all software applications incorporate open source elements, making their security essential to global infrastructure.

Industry leaders highlighted the urgency of the issue. Rahul Patil, chief technology officer at Anthropic, noted that much of this software...