Summer of Clearinghouses
Summary: Chainguard announced Athena, a vulnerability clearinghouse it says was already built and running months before the announcement, arriving as other organizations announced their own clearinghouses over the same few weeks. The article argues the pool of pre-disclosure open source vulnerability data is not the hard part, citing a mean time to exploit estimated at negative seven days and CrowdStrike's figure that 42% of exploited vulnerabilities were hit before public disclosure.
Why it matters: Exploitation now starts on average a week before a patch is public, so the window that matters is who is already protected at the instant disclosure fires - and the article's own test is that a clearinghouse whose pool keeps growing is failing, because the backlog under embargo is the leak surface.
Read the original at The Hacker News ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026