- Mitigation with Akamai App & API Protector
- What Chainguard Athena does
- Stay tuned
Key takeaways
Akamai has joined software supply chain security provider Chainguard’s Athena Coalition as a Mitigation Partner. Chainguard will provide advanced, embargoed vulnerability data with our security research team.
Our teams recently reviewed and rigorously tested a series of newly disclosed vulnerabilities affecting various software components to determine their potential impact on web applications and APIs.
Depending on the specific component, attackers could potentially abuse these vulnerabilities to compromise application integrity, execute unauthorized commands, or disrupt services.
Akamai App & API Protector customers are already protected against the web application firewall (WAF)–applicable vectors of these threats. No immediate action is required from our customers at this time.
In response to the intelligence shared by Chainguard, Akamai has verified that our existing WAF protections effectively mitigate the applicable attack paths.
Mitigation with Akamai App & API Protector
At Akamai, we highly value collaboration with industry peers like Chainguard. Sharing vital threat intelligence allows the broader security community to stay one step ahead of emerging threats.
Following Chainguard's disclosure to our team, the Akamai Security Intelligence Group (SIG)immediately analyzed and tested the provided vulnerabilities against our security solutions. We are pleased to report that we have coverage for all WAF-applicable scenarios that had actionable proof-of-concept (PoC) exploit intelligence related to these vulnerabilities.
Because these protections are already in place within the Akamai App & API Protector, no action is needed from our customers at this time. We will continue to monitor the situation closely to ensure that our platform defenses adapt to any new variations or evasion techniques.
What Chainguard Athena does
is an industry coalition for the orchestrated defense of open source software. Its members feed vulnerability findings from across the industry into Athena, which takes each one through its full lifecycle and turns it into protection for everyone.
A clearinghouse pools and correlates those findings from every member and turns them into fixes at the same machine speed at which they're discovered. Athena then stacks independent layers of protection so that coverage exists even where a clean patch doesn't, staying on every flaw until a durable upstream fix is in place.
Stay tuned
The Akamai SIG will continue to monitor, report on, and create mitigations for threats such as these for both our customers and the security community at large. To keep up with more breaking news from the Akamai Security Intelligence Group, check out our research home page and follow us on social media.
About the Author(s)
Akamai Security Intelligence Group
Akamai SIG is a global team of world-class researchers, engineers, strategists, and data scientists with a broad range of expertise and security disciplines. Our data sources include the enormous Akamai Cloud, open sources, collaboration with third parties, and dark web intelligence. We have also developed our own algorithms and tools that help us deliver our research and keep Akamai security solutions up to date.
