An optimizing compiler is one that tries to maximize some attribute(s) of an executable program at the expense of other attribute(s). Usually the goal is…Ler o artigo completo

TLS 1.3 is the sixth iteration of the Secure Sockets Layer (SSL) protocol. Originally designed by Netscape in the mid-1990’s to serve the purposes of…Ler o artigo completo

Security vulnerabilities aren't static, and neither is the way we consume vulnerability inform. So how is Red Hat keeping pace with vulnerability data trends…Ler o artigo completo

Red Hat today further expands of our offerings of open technologies to power the world’s most critical workloads with the Common Criteria certification of Red…Ler o artigo completo

I’m going to come right out and say it: CVSS does NOT equal Risk (CVSS!=Risk). Anyone who thinks otherwise is mistaken and setting themselves up…Ler o artigo completo

In recent years, there have been a number of security issues taking advantage of flaws in applications and even computer processors. These opened new attack…Ler o artigo completo

A new series of vulnerabilities in Intel processors, known as Microarchitectural Data Sampling, or more simply MDS, was recently made public and Red Hat released…Ler o artigo completo

Random numbers are important in computing. TCP/IP sequence numbers, TLS nonces, ASLR offsets, password salts, and DNS source port numbers all rely on random numbers…Ler o artigo completo

Recently, I was asked to speak at one of Red Hat’s regional events, the Security Symposium series, which was an absolutely easy decision to make…Ler o artigo completo

What's the Microprocessor Data Sampling (MDS) vulnerability? How does it work? How do you mitigate it? Read on to find out…Ler o artigo completo