Open-source maintainers still work underfunded as sponsorship crosses $100 million
2026-07-21T08:51:44Z•10e7d50b175be3c7ee408d3bec97d9ff7a21748c09d0457875800f0062a8bfc7
AI-generated-reportsAI-identity-riskCavern-backdoorGNOMEHOLLOWGRAPHIran-linked-activityMicrosoft-365OTOktaPR3TACKTCG-Opal2air-gapcalendar-C2cryptsetupdisk-encryptionespionagefundingindustrial-control-systemsmalware-distributionopen-sourcepiracy-scamspreemptive-threat-modelingself-encrypting-drivesoftware-supply-chainvulnerability-disclosure
What happened
A batch of Help Net Security stories highlights several high-impact threats and systemic risks: open-source maintainers remain underfunded despite growing sponsorships, slowing supply-chain and patching work; industrial/OT defenses are brittle (the ‘air gap’ is largely a myth); dozens of consumer SSDs/SSDs implementing TCG Opal2 self‑encrypting features were found weak or misconfigured, undermining disk encryption trust; PR3TACK introduces a preemptive framework to catalog plausible (yet unobserved) attacker techniques; enterprise AI usage creates identity risk as agents log in as humans andGN
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 10e7d50b175be3c7ee408d3bec97d9ff7a21748c09d0457875800f0062a8bfc7
- Enrichment time
- 2026-07-21T08:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.