AI Reshapes Cybersecurity as Open-Source Software Risks Mount

As companies accelerate their adoption of generative AI, cyber offense and defense are entering an era of automation. AI can help identify vulnerabilities, analyze threats and respond to incidents, but it can also be used to scale up cyberattacks. OpenAI and AWS are advancing related security-governance efforts, while vulnerabilities in open-source software supply chains have emerged as a major gap in companies’ collective defenses.

Cybersecurity developments from June 22 to 26 included the FortiBleed credential leak and the spread of the Klue supply-chain attack to several cybersecurity vendors. During the same period, OpenAI launched a cybersecurity initiative and AWS unveiled AI agent services, although neither disclosed the related investment. The dual offensive and defensive implications of frontier models also drew scrutiny from the U.S. government and other members of the Five Eyes alliance.