IBM and Red Hat fix 400-plus unknown Java flaws

IBM and Red Hat announced their Lightwell open-source security program has found and patched more than 400 previously unknown vulnerabilities in widely used Java libraries. The companies also made Lightwell Clearinghouse generally available, letting enterprise customers submit specific open-source dependencies for priority review and remediation. Engineers backported fixes into older library versions already running in production, and patches are delivered through secured repositories that integrate with existing IT workflows. Red Hat's Gunnar Hellekson said AI agents have shifted the threat landscape by targeting old dependencies at machine speed, making backporting fixes critical so customers do not have to choose between security and uptime.