Recently, I was asked to speak at one of Red Hat’s regional events, the Security Symposium series, which was an absolutely easy decision to make…read full post

We've gone from the castle-and-moat approach of datacenter security to a more abstract concept of security in the public cloud. Or have we? Do the…read full post

How does the newly-discovered MDS vulnerability work? How does it relate to Spectre and Meltdown? And how do you mitigate it? Red Hat's Jon Masters…read full post

What's the Microprocessor Data Sampling (MDS) vulnerability? How does it work? How do you mitigate it? Read on to find out…read full post

For anyone working in the privacy space, 2018 can be summed up with four letters: GDPR. The General Data Protection Regulation’s implementation date of May…read full post

Each year, Red Hat Product Security reflects back and reviews the vulnerabilities that impacted our products. We’ve shared the results of this analysis in our…read full post

A flaw in runc (CVE-2019-5736), announced recently, allows container processes to "escape" their containment and execute programs on the host operating system. The good news…read full post

Starting with Red Hat Enterprise Linux 8 you may be able to defend against some attacks against deprecated security protocols and options with our newly…read full post

How Red Hat and SELinux are helping to mitigate CVE-2019-5736, a security vulnerability within the runc Linux container runtime…read full post

Like other operating systems, Red Hat Enterprise Linux provides a cryptographically-secure pseudo-random number generator (CSPRNG) as part of our kernel. It is intended to be…read full post