BackendTLSPolicy is a Kubernetes resource that allows the specification of additional Transport Layer Security (TLS) encryption in Gateway API. It gives Gateway API users on Red Hat OpenShift access to the same level of secured traffic as the OpenShift route…
Tag: Red Hat Security
Govern privileged workload boundaries with Red Hat OpenShift, Ansible Automation Platform, and Identity Management
Platform engineering, security architecture, and operations teams are being asked to support 2 realities at once: modern application platforms such as Red Hat OpenShift, and long-lived Red Hat Enterprise Linux (RHEL) fleets that still run critical automation. These parallel systems…
Navigating the future: Schiphol Airport’s journey to shift-left platform engineering
At the OpenShift Commons gathering in Amsterdam at KubeCon + CloudNativeCon earlier this year, attendees got a front-row seat to the digital transformation of one of the world’s most complex hubs. Roel Donker, Technology Lead within Royal Schiphol Group, joined…
AI threats move fast. Your defenses should too.
Recently, Red Hat’s Vincent Danen highlighted how AI models found 271 real security defects in Firefox in a single pass during Mozilla’s collaboration with Anthropic. If AI can do that for defenders, it can do the same for attackers. As…
Beyond automation: Why the surge in AI-driven security vulnerabilities demands human technical advocacy
Future historians will remember spring 2026 as the dawn of AI-driven security vulnerability reporting. On April 7, Anthropic announced a preview of its Claude Mythos AI model, made available to select companies as part of Project Glasswing. The initiative claimed…
Advancing post-quantum capabilities of SSH in Red Hat Enterprise Linux
The post-quantum cryptography (PQC) transition is well underway in Red Hat Enterprise Linux (RHEL). In May 2025, RHEL 10 delivered post-quantum key exchange algorithms in three major cryptography libraries (OpenSSL, GnuTLS, and NSS), making post-quantum key exchange usable in TLS…
7 features of Red Hat Identity Management you need to know for the modern enterprise
In the era of hyper-distributed systems where AI agents traverse our networks, and hybrid clouds stretch from the edge to the core, the “who” and “what” of infrastructure access are more critical than ever. Managing identities across thousands of nodes…
10 essential reads to optimize performance, security, and ROI in the AI era
As enterprise IT organizations push deeper into operationalizing AI, the conversation has shifted from theoretical capability to hard execution metrics. Whether your team is talking with customers about scaling large language models (LLMs) on restricted local hardware, navigating the real-world…
Building the levee: Why Red Hat’s post-quantum strategy is already in production
Have you noticed the recent surge of post-quantum cryptography (PQC) roadmaps and Q-day countdowns? They’re hard to miss. Organizations across the industry are rushing to set PQC deadlines as research increasingly suggests the risk of a cryptographically-relevant quantum computer (CRQC)…
Context-aware advisor recommendations in Red Hat Lightspeed
In distributed system management, defining the “ideal state” of a server is rarely black and white. Different operational goals often create tension between performance tuning and security hardening, where optimizing for one can inadvertently break the other. To resolve this…
Building trust through AI red teaming: Red Hat’s approach to testing model safety
In the last few years, large language models (LLMs) have moved from research labs to production systems powering critical business functions. This rapid adoption poses a fundamental challenge for enterprises: How do you deploy AI with confidence when models can…
Reducing CVE fatigue with Red Hat Hardened Images and Anchore
If you ship software in containers, you know the vulnerability treadmill: Scanners surface a flood of CVEs, backlogs swell, and teams chase patch velocity as if it were the core business of the company (as opposed to serving customers and…
The path to zero trust: Bridging the gap between AI development and OpSec
Artificial intelligence (AI) workloads are transforming industries from financial services to healthcare. However, the use of AI models introduces risk around protecting models, weights, and data from malicious actors. While the industry has established robust traditional security frameworks to protect…
Accelerate innovation and govern integrity with Red Hat Satellite 6.19
Organizations are shifting fast toward image-based workflows and AI, but you shouldn’t have to choose between moving quickly and keeping the lights on. Red Hat Satellite 6.19 bridges that gap. This release focuses on hardening the software supply chain and…
CVE-2026-31431: How Red Hat Advanced Cluster Security and Red Hat Advanced Cluster Management can help
A practical look at what happens when kernel bugs meet containers.Author’s note: Refer to this Red Hat Security Bulletin for the most recent information about this CVE. This blog post was originally published on May 4, 2026 and has been…
CVE-2026-31431: How Red Hat Advanced Cluster Security and Red Hat Advanced Cluster Management can help
A practical look at what happens when kernel bugs meet containersToday, I spent some time trying to break out of a Red Hat OpenShift container.No, not because I had to… but because CVE-2026-31431 dropped, and I wanted to see how…
Redefining security data: Red Hat’s new VEX experience heading to Red Hat Summit 2026
At Red Hat, our deep focus on security doesn’t stop at the code, it extends to how we communicate vulnerability information to our partners and customers. Based on valuable feedback from our partner community, Red Hat Product Security is announcing…
Confidential clusters for Red Hat OpenShift: Developer Preview now available on Microsoft Azure with AMD SEV-SNP
Extending confidential computing from individual workloads to the entire cluster is a new frontier in cloud-native security.Today, Red Hat is announcing the Developer Preview of confidential clusters for Red Hat OpenShift, a new feature of OpenShift that extends confidential computing…
MCP security: Containerization and Red Hat OpenShift integration
In our previous 3 articles, we laid the groundwork for a protected Model Context Protocol (MCP) ecosystem by analyzing the current threat landscape, implementing robust authentication and authorization, and exploring critical logging and runtime security measures. These focused on who…
MCP security: Logging and runtime security measures
Model Context Protocol (MCP) servers often execute code or commands as instructed by an AI agent, exposing them to various risks. To help mitigate these risks, you should implement strict runtime security measures to contain what the server can do…