IBM and Red Hat Find More Than 400 New Vulnerabilities In Popular Java Code (phoronix.com) 8
IBM and Red Hat say their AI-powered Lightwell initiative has identified and helped remediate more than 400 previously unknown vulnerabilities across widely used Java libraries. Phoronix reports: They announced this feat today as part of their promoting Lightwell Clearinghouse to GA, which is an enterprise service for their customers to submit open-source software dependencies for priority review and remediation.
From today's announcement: "The milestone addresses a growing business risk. As autonomous AI agents become capable of combining several lower-risk software weaknesses into a more serious attack, companies need to do more than identify vulnerabilities. They need a practical way to develop, test and deploy fixes in the software that supports critical applications."
From today's announcement: "The milestone addresses a growing business risk. As autonomous AI agents become capable of combining several lower-risk software weaknesses into a more serious attack, companies need to do more than identify vulnerabilities. They need a practical way to develop, test and deploy fixes in the software that supports critical applications."
IBM and Red Hat? (Score:2)
Isn't that a bit like me saying "my wife and Mrs. Wagon ..."?
Java has vulnerabilities? (Score:2)
"Couldn't have happened to a nicer guy!" (Score:1)
In other news, nobody gives a fuck and most of us hope Java and IBM dies in fire. Please take Red Hat with you and re-hire Pottering back from Microsoft and lock him in the center of the burning building.
Which 400 libs? (Score:2)
TFA only says there are 400 fixed libs, can't find that list. All I can find is ads for Lightwell, the AI.
Slashvertisment.
Re: (Score:1)
They don't want to give the hackers clues so they can't counter. If they tell you they'd have to kill you.
What? (Score:2)
Initiative, Clearinghouse... What? Most of us don't even want to know whether those are programs or products, and certainly don't know now.
IBM is pretty bad at naming in general, their names really tell weird stories. And I say that as someone who used to work for them doing support for TME10, another beautifully named product.