IBM and Red Hat patch 400+ unknown open-source vulnerabilities

IBM and Red Hat have announced that their joint security initiative, Lightwell, has identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries. The program utilizes AI-assisted engineering workflows to develop version-specific fixes that are backported directly into the older versions of software currently running in production environments. This approach allows enterprises to address security risks without the need to upgrade entire codebases or disrupt existing operations.

The companies also announced the general availability of Lightwell Clearinghouse. Previously restricted to critical infrastructure sectors, this service now allows any enterprise customer to submit specific open-source software dependencies for priority review and remediation.

According to Gunnar Hellekson, Vice President and GM of Lightwell at Red Hat, the initiative responds to a shifting threat landscape where autonomous AI agents can exploit multiple low-risk vulnerabilities at machine speed to execute complex attacks. While the current focus is on Java, the roadmap includes expanding support to Python, JavaScript, and .NET.