Broadcom unveils TrueSource security tools and vDefend at AIS 2026
TrueSource Spring Enterprise ships verified patches on or before CVE publication day and backports fixes for up to seven years, Broadcom said in Seoul.
Broadcom presented a set of TrueSource open-source and software supply chain security products, along with VMware vDefend, at the AIS 2026 conference held on November 3 at the Korea Science and Technology Center in Seoul, according to dailysecu.com. About 700 security professionals attended the event.
TrueSource Spring Enterprise provides security patches verified by official Spring committers before or on the day a CVE ID is published. It also offers CVE-only backporting of security fixes for up to seven years to the last minor version of each major version. A companion tool, Application Advisor, analyzes code repositories and generates dependency updates and code changes as pull requests based on OpenRewrite, covering more than 5,000 transitive dependencies including Apache Tomcat and Tanzu OpenJDK.
TrueSource Trusted Artifacts rebuilds verified upstream sources in an isolated clean-room environment and applies SLSA build level 3. It supports the Java, Python and JavaScript ecosystems and supplies Bitnami-based secure container images and Helm charts with provenance attestations and SBOMs.
TrueSource Data Services provides hardened enterprise distributions and support for PostgreSQL, RabbitMQ, MySQL and Valkey, with Kubernetes operators and Helm charts.
VMware vDefend is a software-defined security solution embedded in the hypervisor that controls east-west traffic between workloads. Its distributed firewall performs L4-L7 microsegmentation at the virtual network interface level with default-deny policies, while the distributed IDS/IPS blocks exploit traffic and offers virtual patching for unpatched or legacy systems.
Quick answers
What is TrueSource Spring Enterprise?
It is Broadcom's enterprise support and vulnerability response offering for Spring, providing patches verified by official Spring committers before or on CVE publication day and CVE-only backporting for up to seven years.
What does VMware vDefend do?
It is a software-defined security solution embedded in the hypervisor that controls east-west traffic between workloads, with L4-L7 microsegmentation and distributed IDS/IPS.
When and where was AIS 2026 held?
AIS 2026 took place on November 3 at the Korea Science and Technology Center in Seoul, with about 700 security professionals attending.