A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure into a shifting threat.

The high-severity defect affects a widely used — but largely hidden — archive tool that spans many forks.