Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted…
Category: Red Hat Security
Securing the enterprise software supply chain in the AI era
Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted…
Responsible disclosure in the age of Vulnpocalypse
New tools can find potential flaws faster than teams can assess and fix them. When a serious flaw is discovered, the central challenge is ensuring…
A patch only reduces risk when it runs in production
The patch was ready in days. It took months to ship. Why?I hear that question in nearly every customer conversation about vulnerability management. The…
Open Source Security Signals | Q3 2026
Vulnerabilities are easy to count. Meaningful risk is harder to measure.Open source has become the foundation of modern software because it works. Shared…
What’s old is new: Lightwell discovers novel zero-day vulnerability in core Java framework
Enterprise IT runs on decades-old foundational code. The prevailing assumption around these mature components is that if code has been sitting untouched…
What’s old is new: Lightwell discovers novel zero-day vulnerability in core Java framework
Enterprise IT runs on decades-old foundational code. The prevailing assumption around these mature components is that if code has been sitting untouched…
Why “secure by design” is the new standard for open source
Open source software faces significant regulatory shifts, making “secure by design” development practices increasingly important. The Cyber Resilience Act…
Using on-premise Red Hat Lightspeed capabilities to monitor vulnerabilities and apply advisor remediations
Managing vulnerabilities across a fleet of Red Hat Enterprise Linux (RHEL) systems is a continuous challenge. Between tracking Common Vulnerabilities and…
What enterprises need to know about the Cyber Resilience Act and software supply chain risk
In part 1 of this series, we examined why enterprises need more than an inventory of the open source components in their software. Understanding where…
What enterprises need to know about the software they depend on
Knowing an application contains open source components is not the same as understanding the software and communities behind them.For many organizations,…
Securing AI agents requires securing the systems around them
Enterprise AI is changing from software that primarily generates information to software that can take action. AI agents can call APIs, invoke tools,…
Red Hat Enterprise Linux 10 STIG automation now matches DISA STIG V1R2
For the U.S. Department of Defense (DoD) and its contractors, security has to hold up against a published baseline—not a general claim that systems are…
Turning security complexity into useful intelligence: What’s new in Red Hat Lightspeed
In a post-Mythos world, IT teams face a mounting crisis. Many are doing more with the same staff, and security work hasn’t gotten simpler. Alerts still…
2026 update: The road to quantum-safe cryptography in Red Hat OpenShift
A year ago, I wrote about the road to quantum-safe cryptography in Red Hat OpenShift. At the time, much of that road was forward-looking: TLS 1.3 was not…
Stop rewriting stable code: How Lightwell protects your bottom line and developer velocity
How Lightwell breaks the forced-upgrade cycle to keep your systems protected and your developers focused on innovation.The Monday morning CISO…
Closing the loop: From network policy intent to verified reality
Part 3 of a series on implementing zero trust security in Red Hat OpenShift with the layered zero trust validated pattern.Kubernetes NetworkPolicies are…
The Lightwell reality check
We’ve been talking with business leaders about Lightwell for the past few months, and the conversation always starts with enthusiasm. AI-driven exploits…
Accelerating post-quantum security migration with Red Hat Certificate System
The realities of quantum computing and its inevitable impact on enterprise cryptography are already taking shape:Red Hat Enterprise Linux has been…
Accelerating post-quantum security migration with Red Hat Certificate System
The realities of quantum computing and its inevitable impact on enterprise cryptography are already taking shape:Red Hat Enterprise Linux has been…