Open-source security is a mess - IBM and Red Hat bet $5 billion and 20,000 engineers can fix it
ID: 30abe7ce-196c-50d4-a2fd-76165e91fcdc
STIX ID: report--30abe7ce-196c-50d4-a2fd-76165e91fcdc
Feed Name: ZDNet Security
Project Lightwell: IBM and Red Hat are launching a large AI-driven initiative, investing $5 billion and dedicating 20,000 engineers to build a commercial, subscription-based clearinghouse that scans, prioritizes, and delivers vetted fixes for open-source components (starting with Maven/Java and expanding to PyPI, npm, Go, etc.), working with upstream maintainers via a human-in-the-loop approach while raising questions about upstream compensation and potential gatekeeping.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.