Lightwell: IBM and Red Hat fix 400+ Java library flaws
IBM and Red Hat say they have discovered and patched more than 400 vulnerabilities in popular Java libraries that were not previously known. The work was done through Lightwell, a joint program that fixes open source code companies already run in production.
Until those fixes are applied, organizations using the affected libraries remain exposed. The companies tie the effort to a broader shift: autonomous AI agents can now link several small software weaknesses together into a single serious attack.
"AI agents do not care if a codebase is ten years old or otherwise considered stable, because one small crack is all it takes to chain an attack together. Finding those bugs is only half the battle: the real work is backporting fixes directly into active production apps so customers do not have to pick between security and uptime. Finding and neutralizing 400+ novel vulnerabilities so quickly shows how fast Lightwell can move, and we are just getting started," said Gunnar Hellekson, VP and GM, Lightwell, Red Hat.