An optimizing compiler is one that tries to maximize some attribute(s) of an executable program at the expense of other attribute(s). Usually the goal is…read full post

TLS 1.3 is the sixth iteration of the Secure Sockets Layer (SSL) protocol. Originally designed by Netscape in the mid-1990’s to serve the purposes of…read full post

Security vulnerabilities aren't static, and neither is the way we consume vulnerability inform. So how is Red Hat keeping pace with vulnerability data trends…read full post

Red Hat today further expands of our offerings of open technologies to power the world’s most critical workloads with the Common Criteria certification of Red…read full post

I’m going to come right out and say it: CVSS does NOT equal Risk (CVSS!=Risk). Anyone who thinks otherwise is mistaken and setting themselves up…read full post

In recent years, there have been a number of security issues taking advantage of flaws in applications and even computer processors. These opened new attack…read full post

A new series of vulnerabilities in Intel processors, known as Microarchitectural Data Sampling, or more simply MDS, was recently made public and Red Hat released…read full post

Random numbers are important in computing. TCP/IP sequence numbers, TLS nonces, ASLR offsets, password salts, and DNS source port numbers all rely on random numbers…read full post

Recently, I was asked to speak at one of Red Hat’s regional events, the Security Symposium series, which was an absolutely easy decision to make…read full post

We've gone from the castle-and-moat approach of datacenter security to a more abstract concept of security in the public cloud. Or have we? Do the…read full post