Christian Grobmeier

In November 2021, a zero-day flaw in a widely used software library called Log4j allowed hackers to take full control of compromised devices through a simple application interface. This event crossed into mainstream headlines and became known as Log4Shell. Governments and companies spent billions to patch the vulnerability, upgrade IT systems, and contain the damage. Developers in Europe are central to maintaining the critical systems we all rely on, managing current security risks and addressing new challenges emerging in the age of AI. That’s why @github is committed to securing the digital supply chain by strengthening the open source projects that underpin the internet and the AI stack. Through Microsoft’s new EU Security Program Commitments, we’re investing in open source security with the GitHub Secure Open Source Fund—supporting the projects that keep the internet and AI running.