[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fn7n6hcGImKC_RAvq1JXCLDPFCz4shAoFuHf4VXaXhw4":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":108},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9d5223f6-a634-4a33-ad6b-8273665fc324","Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software","anthropic-rolls-out-program-for-long-term-commitment-to-secure-critical-infrastr-b7e7b6","The critical infrastructure defense program will seek to pair Claude models, Anthropic engineers and threat research with the expertise of cybersecurity companies. The post Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software appeared first on CyberScoop.","Anthropic has launched a new program to bolster cybersecurity for critical infrastructure and open-source software by leveraging its AI models and engineering expertise. The initiative partners with leading cybersecurity firms to identify and fix vulnerabilities, offering AI tools and technical support to states and infrastructure operators. Anthropic also provides free, periodic scans for open-source projects, aiming to automate vulnerability detection and patching.","Anthropic launches program to secure critical infrastructure and open source software with AI.","https:\u002F\u002Fcyberscoop.com\u002Fanthropic-cybersecurity-program-critical-infrastructure-open-source\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F09\u002FGettyImages-2257697741-1.jpg","2026-10-08T21:32:40+00:00","2026-10-08T22:00:21.995095+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Claude","product",{"name":21,"type":22},"Anthropic","vendor",{"name":24,"type":22},"Accenture",{"name":26,"type":22},"Booz Allen",{"name":28,"type":22},"CrowdStrike",{"name":30,"type":22},"Deloitte","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":31,"icon":33,"name":34,"slug":35},null,"Threat Intelligence","threat-intelligence",[37,42],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",[],[28,21,24],{"controls":50,"vendors":107},[51,80],{"slug":52,"name":53,"problem":54,"products":55},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":81,"name":82,"problem":83,"products":84},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":102,"product_name":103,"url":105,"description":106},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",[],{"slug":109,"title":110,"body":111,"framework_refs":112,"framework_notes":123},"anthropic-launches-ai-powered-critical-infrastructure-open-source-security-program","Anthropic Launches AI-Powered Critical Infrastructure & Open Source Security Program","Anthropic's new initiative highlights a systemic challenge: critical infrastructure and open-source software ecosystems are chronically under-resourced when it comes to proactive vulnerability identification and remediation. Many infrastructure operators lack the tooling or expertise to continuously scan for and patch vulnerabilities before adversaries exploit them. Open-source projects, which underpin vast swaths of modern software, are particularly at risk due to limited maintainer bandwidth. This program demonstrates that AI can be a force multiplier for security teams, automating detection and patching workflows at scale. The broader lesson is that proactive, automated vulnerability management is no longer optional for critical systems — it is a baseline expectation.",[113,114,115,116,117,118,119,120,121,122],"CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF ID.RA-1: Asset Vulnerabilities Are Identified and Documented","NIST CSF PR.IP-12: Vulnerability Management Plan","NIST SP 800-161: Supply Chain Risk Management (for open-source dependencies)","CISA Cross-Sector Cybersecurity Performance Goals (CPGs): Vulnerability Management","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities","ITIL 4: Problem Management (proactive identification of recurring vulnerabilities)",{}]