IBM and Red Hat patch 400 bugs in open
IBM Australia Limited
By Dylan Bushell-Embling
Thursday, 08 October, 2026
IBM and Red Hat have revealed that Lightwell, their joint initiative focused on securing openly unknown vulnerabilities in widely used Java libraries
The two companies have uncovered, remediated and backported fixes for the vulnerabilities, which were found in widely deployed, production-grade software. The development marks an early success for the $5 billion initiative, which was announced in late May.
The Lightwell initiative combines openopenabilities, and uses AI-assisted engineering workflows to develop version-specific fixes for open
Developed remediations are then delivered through secured repositories connected to customers’ existing IT processes, to allow organisations to address difficult or previously unknown vulnerabilities while maintaining their existing software repositories, development pipelines and testing processes.
Red Hat and IBM have meanwhile announced the general availability of Lightwell Clearinghouse, a solution for allowing enterprise users to submit specific openhe solution will complement Lightwell Network, which enables IT teams to access verified patches, introduce remediated software into their existing workflows, and establish an ongoing process for addressing vulnerabilities
Fixes developed through Lightwell are contributed back to upstream openpenClearinghouse participants are maintained
Red Hat VP and GM Gunnar Hellekson said the initiative has been developed in response to the expanding threat landscape, triggered by the ability of AI agents to exploit old dependencies at machine speed.
“Agents do not care if a codebase is 10 years old or otherwise considered stable, because one small crack is all it takes to chain an attack together. Finding those bugs is only half the battle: the real work is backporting fixes directly into active production apps so customers do not have to pick between security and uptime,” he said. “Finding and neutralising 400+ novel vulnerabilities so quickly shows how fast Lightwell can move, and we are just getting started.”
SailPoint updates its identity security platform
SailPoint has simultaneously announced updates to its cloud-based Sailpoint Human…
Cloudflare to become public certificate authority
Cloudflare aims to help website operators and web users navigate the transition to a post-quantum…
DigiCert aims to help tame rogue AI agents
DigiCert has announced support for NVIDIA’s Open Agent Safety Platform to help equip…
