Broadcom is utilizing artificial intelligence to identify and patch vulnerabilities within its TrueSource Spring Enterprise platform, marking a significant shift in how software vendors manage code security, with further coverage provided by SDx Central.
Broadcom recently deployed patches for 89 novel vulnerabilities to critical infrastructure customers. The company uses frontier AI models to scan for security flaws and automatically construct fixes. To date, the TrueSource platform has addressed 408 vulnerabilities and delivered over 1,090 fixes. This initiative aims to secure the open-source supply chain by providing verified, clean libraries to enterprises. Purnima Padmanabhan, a vice president and general manager at Broadcom, emphasized that these tools are essential as AI-driven threats, such as those associated with the Claude Mythos platform, increase in sophistication. While Broadcom continues to enhance its security posture, the industry remains under pressure from persistent threats. For instance, researchers recently identified a China-linked group exploiting a VMware vulnerability to bypass logging and deploy malware. Similar efforts are underway across the industry, including a project by IBM and Red Hat that recently remediated 400 vulnerabilities in Java libraries. These developments highlight a broader trend where vendors must leverage machine speed to backport security fixes into production environments before attackers can exploit small code weaknesses.
Source: SDx Central
