Raleigh’s Red Hat and IBM have announced a $5 billion initiative called Project Lightwell aimed at enhancing the security of open source software. The initiative comes in response to growing concerns over artificial intelligence-driven cybersecurity threats, particularly following warnings from Anthropic regarding its AI model, Claude Mythos.
Anthropic stated that Claude Mythos poses significant risks if misused, as it can exploit software vulnerabilities that are often undetectable to humans. Consequently, the company opted to preview the model to select partners, including Apple, Amazon, Nvidia, and Cisco, to help them address vulnerabilities before potential attackers can exploit them.
Experts highlight that AI tools have drastically shortened the time frame for identifying vulnerabilities, reducing exposure windows from months to mere minutes. Will Dormann, a vulnerability analyst at Tharros Labs, emphasized this shift in a recent statement.
Gunnar Hellekson, vice president and general manager for the Red Hat Enterprise Linux business, noted, “Mythos is really just a synecdoche for the broader fact that these models have now become powerful enough that they are better at finding security problems than humans are.” He stated that Red Hat and other companies are actively responding to this new reality.
Project Lightwell will function as a platform allowing customers to confidentially share internal vulnerabilities they discover with AI. Red Hat explained that this approach leverages the collaborative nature of open source ecosystems, where more than 90% of Fortune 500 companies utilize open source software.
After a vulnerability is reported, Red Hat will alert the original developers of the at-risk code, enabling them to implement fixes that benefit all users of the software. Hellekson asserted that Red Hat’s reputation will ensure that its security alerts are taken seriously amidst numerous notifications that developers receive.
Initial adopters of Project Lightwell include 11 major financial institutions, such as Bank of America, Morgan Stanley, and Wells Fargo. Network security expert HD Moore noted that the initiative could also benefit smaller organizations that may not have extensive AI resources.
IBM acquired Red Hat for $34 billion in 2019, and since then, Red Hat has consistently been a top performer within IBM, achieving double-digit revenue growth compared to IBM’s more modest increases. Both companies are significant employers in the Triangle area, with Red Hat’s headquarters located in downtown Raleigh. However, Red Hat’s office will not have a unique role in Project Lightwell.
