IBM and Red Hat announced the launch of "Project Lightwell," aimed at enhancing the security of open source software (OSS) using artificial intelligence technology. The initiative will establish a platform called the "Trusted Enterprise Clearinghouse," with more than 20,000 engineers worldwide participating, with the goal of identifying and fixing security vulnerabilities in open source software on a large scale.

As open source software is widely used in enterprises, security risks have also increased. IBM stated that the company currently uses over 62,000 open source software packages and has deep expertise in more than 10,000 of them. The detection of 23,019 vulnerabilities by Anthropic's Claude Mythos model highlights the urgency of current security issues.

The "Trusted Enterprise Clearinghouse" will serve as a "security coordination layer," using advanced AI capabilities to verify and test fix solutions. Participating companies can integrate security patches directly into their software supply chains through commercial subscriptions. This process allows companies to share sensitive security issues within a secure framework and then receive optimized patches adapted for production environments, ultimately enabling the upstream sharing of fixes to support long-term maintenance.

Rob Thomas, Senior Vice President of IBM Software, revealed that the initiative will officially launch commercially within the next 30 days, with subscription fees determined based on the number of software packages used by the enterprise. Currently, IBM and Red Hat have conducted preliminary pilot tests with several major companies, including Bank of America, Citigroup, Goldman Sachs, JPMorgan Chase, Mastercard, Morgan Stanley, Royal Bank of Canada, Visa, and Wells Fargo. The initial results will guide subsequent commercial services.

Arvind Krishna, Chairman and CEO of IBM, stated that open source software is the foundation of the digital economy and the core of modern AI. Project Lightwell will combine AI, engineering expertise, and trusted collaboration to ensure the security of open source software from the source, covering the entire supply chain.

Key Points:

- 🚀 IBM and Red Hat jointly launched "Project Lightwell" to enhance the security of open source software.

- 🛡️ More than 20,000 engineers will participate in establishing the "Trusted Enterprise Clearinghouse," focusing on identifying and fixing security vulnerabilities.

- 💼 Enterprises can obtain security patches through subscriptions, and several major financial institutions have participated in the pilot program.