Open Defense Initiative — Campaign Analysis & Threat Activity

Related Threat Clusters

GitLab Vulnerabilities Enable Remote Code Execution via Oj Parser Flaws
A critical security vulnerability in GitLab has been disclosed, stemming from two long-standing memory-safety flaws in the Oj JSON parsing library. Discovered by Depthfirst's automated analysis, these flaws allow…

4 articles · Updated July 25, 2026
Depthfirst Unveils $5M Initiative to Address Critical Vulnerabilities in Open Source Software
On May 12, 2026, AI cybersecurity firm Depthfirst announced the launch of the Open Defense Initiative, committing up to $5 million in credits to assist open source projects in identifying and fixing vulnerabilities. The…

4 articles · Updated May 12, 2026

GitLab Oj Spill — Depthfirst · July 25, 2026
depthfirst Commits up to $5M in Credits to Help Open Source Software Find and Fix Zero ... — Morningstar · May 12, 2026
Depthfirst Claims Its AI Model Outperforms Anthropic's Mythos in Code Vulnerability Detection — Kucoin · May 12, 2026

Zero-day Exploit Envoy CVE-2026-54502 CVE-2026-54896 CVE-2026-54897 CVE-2026-54898 CVE-2026-54899 CVE-2026-54900 CVE-2026-54901 CVE-2026-54902 CVE-2026-54903 CWE-120 - Classic Buffer Overflow