IBM, Red Hat Commit $5B to Secure Open Source via AI
TL;DR. IBM and Red Hat launched Project Lightwell with a $5 billion investment to secure open-source software supply chains. - The initiative uses AI to identify, triage, and validate vulnerabilities in open-source codebases. - Over 20,000 engineers will focus on upstream maintenance and AI-assisted vulnerability reviews. - Validated patches and lifecycle management features will be delivered through commercial subscriptions.
- IBM and Red Hat commit $5 billion to Project Lightwell.
- Project Lightwell aims to secure open-source software supply chains.
- AI will identify, triage, and validate vulnerabilities in open-source code.
- Engineers will focus on upstream maintenance and AI-assisted reviews.
- Validated patches will be delivered via commercial software subscriptions.
Sources
- IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under “Project Lightwell” — securityweek.com
- newsroom.ibm.com — newsroom.ibm.com
- redhat.com — redhat.com