FOSS Force reports that IBM and Red Hat’s AI-driven Lightwell platform identified and remediated more than 400 previously unknown vulnerabilities in popular Java libraries, a figure that rose from 300 in the embargoed draft to 400 by the final release. The announcement accompanied general availability of Clearinghouse, the part of the platform that lets users submit open source dependencies for review and remediation, previously restricted to financial services, while the other half, Network, offers Red Hat-rebuilt and signed secure package repositories. Lightwell VP and GM Gunnar Hellekson said AI agents shifted the threat landscape overnight and exploit old dependencies at machine speed, and Red Hat said applicable fixes are contributed back upstream under responsible disclosure protocols.
IBM and Red Hat's Lightwell finds and fixes 400+ unknown Java vulnerabilities
FOSS Force reports that IBM and Red Hat's AI-driven Lightwell platform identified and remediated more than 400 previously unknown vulnerabilities in popular Java libraries, a figure that rose from 300 in the embargoed draft to 400 by the final release. The announcement accompanied general availability of Clearinghouse, the part of the platform that lets users submit open source dependencies for review and remediation, previously restricted to financial services, while the other half, Network, offers Red Hat-rebuilt and signed secure package repositories. Lightwell VP and GM Gunnar Hellekson said AI agents shifted the threat landscape overnight and exploit old dependencies at machine speed, and Red Hat said applicable fixes are contributed back upstream under responsible disclosure protocols.
Source: FOSS Force