IBM Charges Enterprises $1M Annually for Validated Legacy Open-Source Patches IBM is betting that AI can transform legacy open-source vulnerability remediation into a multibillion-dollar business by delivering validated, backported security patches for software versions enterprises continue to run years after upstream support ends.