IBM Bets Big on Open-Source Security With $5 Billion Project Lightwell

IBM has made a massive $5 billion bet on open-source security with its Project Lightwell initiative, which aims to secure over 1.5 million language libraries, including Python and Java.

The project's scope is ambitious, covering nearly all software packages used by Fortune 500 companies, which rely heavily on open-source code. IBM believes AI-powered attacks are making it easier for malicious actors to exploit weaknesses in this code.

Project Lightwell's unique approach involves a clearinghouse system where businesses can confidentially report security flaws and receive tested patches from a reliable middleman. This platform has already produced 7,500 patches in its first two weeks of use.

The pilot program has attracted several major financial institutions, including Bank of America, JPMorgan Chase, and Goldman Sachs. However, investors remain cautious, with IBM's stock price dropping around 0.2% after the announcement.