AI Companies Put $12.5M Into Open Source Security to Fix a Problem Their Tools Helped Create

The Linux Foundation has announced $12.5 million in grants to address the growing problem of AI-generated security reports overwhelming open source maintainers. Managed by Alpha-Omega and OpenSSF, the funding comes from major AI companies including Anthropic, AWS, Google, GitHub, Microsoft, and OpenAI. The initiative aims to provide practical security tooling that fits into existing maintainer workflows. The problem is real: cURL's bug bounty program was shut down entirely after being flooded with AI-generated, unresearched vulnerability submissions. Linux kernel maintainer Greg Kroah-Hartman noted that funding alone won't solve the problem, but OpenSSF's active resources can help maintainers triage the surge of AI-generated reports.