Attributed metadata history
Up to 100 retained publisher events per page for b2c52c99e4c787870289cc9435377cd57954dd7dc695d4e51bc400219a76eccb. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_cdcffed32aa78fd61f
observed · 2026-10-12 15:25:04 UTC
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to a new service, Lightwell Clearinghouse, for review. They’ll be looking for bugs such as the critical sandbox bypass in Java template engine Thymeleaf, with a CVSS score of 9.1, discovered in April. “AI agents shifted the threat landscape overnight, exploiting old dependencies at machine speed. Finding those bugs is only half the battle: the real work is backporting fixes directly into active production apps so customers do not have to pick between security and uptime. Finding and neutralizing 400+ novel vulnerabilities so quickly shows how fast Lightwell can move,” said Gunnar Hellekson, vice president and general manager of Lightwell. IBM and Red Hat announced in May that they would commit 20,000 engineers and $5 billion to the Lightwell project, combining their open-source engineering expertise, Red Hat’s community relationships, and AI-assisted engineering workflows. Their goal is not just to identify s
Fingerprint: be8ad899183673137e92c6ee9701ad3564d0e081f66e39ccbae86261446b4f5e
intelligence_src_cdcffed32aa78fd61f
observed · 2026-10-12 15:25:03 UTC
available
Fingerprint: 7058adebc821bb9d551a9ff0b80ac7c4e28d07e4464aca030b831463a16c18c5