Official account for all things Red Hat Security. For product security issues, contact [email protected]. For security incidents, contact [email protected].
Raleigh, NC
Joined January 2014
- Tweets3.5K
- Following34
- Followers4K
- Likes254
Important memory corruption flaws in PHP's request handling have been identified: CVE-2026-109618 and CVE-2026-109619. Red Hat is expediting fixes, with some updates already available. The latest updates are available here: red.ht/4icdR3k
Threat modeling shouldn't be a bottleneck. We open-sourced ours — it runs right in Claude Code, Cursor, or Gemini CLI and points straight to the line of code. Check out our latest blog and try it out! red.ht/4hDilAS #ThreatModeling #security #OpenSource
"Same goals. Different clocks." Red Hat's 2025 Risk Report explores why cybersecurity compliance gets harder the better you get at security. Only 41% of companies expect full CRA compliance by Dec 2027 — let's unite to secure the global open source ecosystem together! red.ht/4xfX6Kv
Great news! Red Hat is an Open Source Software Steward under the EU Cyber Resilience Act, covering 15 projects including Ansible, Fedora, and CentOS Stream. This means developers can keep creating and securing amazing software, while Red Hat handles the regulatory details. red.ht/3Rs4KSW #OpenSource #CRA #CyberSecurity
Red Hat Security retweeted
Learn how we are collaborating with @IBM and @Deloitte on Lightwell to deliver automated patch validation directly to production, securing the software supply chain at machine speed: red.ht/4aPmCNW.
While the industry makes bets on the exact date the quantum clock will hit zero, Red Hat is focused on action...so when the wave hits, the levee is already built. 🌊
Check it out: red.ht/4uAwKSu #PQC #QuantumComputing
Check out the latest in the MCP security series!
Our AI expert, Huzaifa, discusses "How to leverage Red Hat technology—specifically containerization and Red Hat OpenShift—to create a "security-first" deployment..." #MCPserver #security #AI #OpenShift #containerization
Learn more: red.ht/4cE2vUp
Red Hat partners, the new VEX format has arrived—bringing precise product stream details (like RHEL 9.6), easier integration, and cleaner, validated data!
The beta is live—explore it now and tell us what you think ahead of GA at #RedHatSummit 2026.
Learn more: red.ht/4sZ39As red.ht/4sZ39As #security #VEX
Exciting news! Check out Part 3 of our MCP security series! We’re sharing helpful tips and strategies to keep your MCP environment secure. Learn more here: red.ht/4tL6NyV #ModelContextProtocol #MCP #LLM #Security
Guardrails reduce unsafe behavior, but identity and authorization limit the damage when something goes wrong. When AI systems run with broad permissions, a clever prompt can turn "text" into "action." Strong IAM makes sure the system cannot execute privileged operations unless the right identity is proven and the right authorization is present. Check out the concluding blog from the AI Security series, "AI security: Identity and access control": red.ht/4t1O3eJ #ZeroTrust #IAM
Curious about prompt injection? 🤔 It happens when AI mixes up data and instructions! Check out how you can keep your enterprise LLM apps safe with smart guardrails at every step. Dive in for more details in the blog, "AI security: Defending against prompt injection and unsafe actions": red.ht/4rYjg0J #AISecurity #PromptInjection #AIGuardrails #RAG
AI brings exciting opportunities, but it's important to stay informed about risks like data poisoning, model theft, and privacy leaks. Want to learn how to protect your projects? Check out Juan Pérez de Algaba Sierra's blog on mapping the AI attack surface and securing your models: red.ht/4sKB0y1 #AISecurity #SDLC
Keeping your company safe starts with a strong security setup! Want to know how to protect your applications and organization from threats? Check out our latest blog: "What does 'AI security' mean and why does it matter to your business?" red.ht/4tmSHne #AISecurity #chatbot
Security is our top priority! Check out Huzaifa's latest MCP security series article, "MCP security: Implementing robust authentication and authorization" and learn about the authentication and authorization mechanisms needed to secure connections between #MCP servers, clients, and other components within the agentic systems. red.ht/3N9BBd6 #AI #security
Is your #MCP server really secure? Our #AI expert, Huzaifa Sidhpurwala, discusses recent MCP security issues that expose systems to remote code execution, data exfiltration, and even privilege escalation. Read the blog, “MCP security: The current situation,” the first in our new upcoming series, to learn more: red.ht/4aPoGVd
Vulnerability management isn't just about patching—it's about smart prioritization. Learn how to go beyond CVSS base scores and embrace context for truly effective security. Learn more in our latest blog, “From challenge to champion: Elevate your vulnerability management strategy.” red.ht/4azyX8d
#VulnerabilityManagement #CVSS #CVE #security
Red Hat is proud to support the advancement of cybersecurity standards by contributing expertise in open source and enterprise security to the EU's Cyber Resilience Act implementation. Discover our commitment to building a safer and more secure digital environment for everyone: red.ht/3Yu6nzt
Listen to the new episode "AI Is Changing The Threat Landscape" on the Red Hat Compiler podcast featuring Vincent Danen! red.ht/4qBCitu
From Incident Responder to Security Steward: Red Hat’s Open Approach!
In our latest blog, Darius Williams explores his journey from incident responder to security steward. Discover how Red Hat’s open approach to vulnerability management helps you cut through the noise and focus on the threats that actually matter. Check out the full experience here - red.ht/4p3moHj #VulnerabilityManagement #Security #OpenSource #IncidentResponse
Red Hat OpenShift AI Achieved ISO 42001 AI Certification, Reinforcing Red Hat's Leadership In Responsible AI. Read the official press release: bit.ly/464rahw
