Smart Talks with IBM: The $5 Billion Effort to help Secure the World’s Shared Software
Summary
Malcolm Gladwell explores IBM and Red Hat’s $5 billion Project Lightwell, a massive initiative to secure open source software against AI-driven threats. The episode features insights from Wells Fargo’s CISO, IBM’s Gunnar Hellickson, and former CISA director Jen Easterly, who discuss how frontier AI models have exposed critical vulnerabilities in shared code. They explain the economic incentives that historically neglected software security and argue that AI can now help defenders fix these flaws at scale, shifting the balance in the ongoing cyber arms race.
Topics discussed
Introduction to Smart Talks with IBM
IBM and Red Hat announce Project Lightwell
Why major banks joined the initiative
The urgency created by AI vulnerability detection
How open source software and copyright work
The Cathedral vs. The Bazaar and open source scale
The security gap in open source dependencies
Jen Easterly's background in national security
Software security as a market failure
Why open source maintainers struggle with security
AI's impact on vulnerability chaining and risk
Using AI to accelerate security fixes
The origin of Project Lightwell and bank collaboration
How the Lightwell clearinghouse model works
The scale and logistics of the 20,000 engineer team
Optimism for the future of software security
Closing remarks and credits
Listen ad-free on Castria