Red Hat News

Starting with Red Hat Enterprise Linux (RHEL) 10.2, Firefox and Thunderbird are delivered as Flatpaks by default. If you install RHEL with a graphical desktop, your browser and email client will now come from the Red Hat Flatpak registry instead of traditional RPM Package Managers (RPMs). Here's what that means in practice and why we think it's a better experience.What's changingWhen you install RHEL 10.2 with a GNOME desktop, Firefox and Thunderbird are delivered as Flatpaks as part of the installation process. If your system has an active RHEL subscription, this happens automatically—no ma

Your agent can reach its tools. Identity is scoped. Governance is in place. None of that matters if the model behind the agent cannot reliably call those tools.I have watched this play out. A team builds an agent on LangChain or CrewAI. It works in development. It passes staging. Then someone asks the obvious question: where is inference actually running? The answer, almost every time, is a third-party hosted API—OpenAI, Anthropic, or Google. Not because the team prefers it, but because open-weight models running on their own infrastructure weren't reliable enough for agentic workloads. The

It's Friday evening. Priya, a machine language (ML) engineer at a financial services firm, queues up a fraud-detection fine-tuning job on an GPU cluster costing $55 an hour. The run should take about 40 hours—roughly $2,200 in compute. She double-checks the hyperparameters, submits the job, and heads home for the weekend.Monday morning, she opens her laptop. The model had stopped learning sometime Friday night, but the job kept running—burning through 2 full days of GPU time on a training run that was going nowhere. That's over $1,500 in wasted compute, and she has to start over.If this so

Digital sovereignty used to sit somewhere between a compliance checkbox and a future roadmap item. That’s changing fast. At Red Hat Summit, Mohammed Retmi of Core42 in the United Arab Emirates and A.S. "Raj" Rajgopal of NxtGen in India joined me for a roundtable on how 2 very different markets are building sovereign clouds, and why the conversation now shows up in nearly every customer meeting.Their starting points could not be more different. In the UAE, national regulation defines what partial and full sovereign cloud mean, from data residency and encryption to government pre-screening of

Post-quantum cryptography: The emerging threatThe transition to post-quantum cryptography (PQC) is becoming an urgent priority for the global financial sector due to the rapid evolution of quantum computing. Cryptographically relevant quantum computers exist only as research prototypes. However, their inevitable development threatens to compromise public-key cryptography—e.g., Rivest-Shamir-Adleman (RSA) and elliptical curve cryptography (ECC)—currently used to protect financial communications, digital signatures, and payment systems. For financial services institutions (FSIs) this is of p

Part 2 of a series on implementing zero trust in Red Hat OpenShift with the layered zero trust validated pattern (ZTVP)In our previous article, we explored why network policies, specifically a default-deny posture combined with strict ingress and egress rules, are your critical last line of defense when you can’t patch fast enough or when all other security barriers fail. By locking down network communication, we effectively eliminate lateral attack paths and contain the blast radius of a compromised workload.But a true zero-trust architecture as defined by NIST SP 800-207 isn't about buildi

How can a large organization achieve 100% uptime and zero security breaches at a massive scale? It requires moving past standard management techniques and focusing on a critical metric: maintainability. At the recent Red Hat OpenShift Commons Gathering in Amsterdam, ING senior engineers Robbin Siepman and Rob de Boer revealed the maintainable architectural blueprint behind one of the financial sector's most resilient cloud-native estates.ING is a global financial institution that serves nearly 40 million customers across 100 countries. One of the bank’s main missions is to maintain the ING H

The need for trustworthy networking, reliable cloud access, and compliance with digital sovereignty requirements has increased substantially in recent years. These demands have been generally addressed by fragile, costly, and outdated models based on IP address evaluation. These requirements must also be considered within the stark geopolitical reality of data sovereignty, where national and regional laws increasingly restrict where data must reside and who can access it.We believe it is time to provide enhanced, identity-based mechanisms to satisfy these requirements and to address use cases

Every OpenShift admin knows the calculus. A new Red Hat Enterprise Linux CoreOS ships with capabilities you want: better hardware support, updated crypto policies, kernel improvements. But adopting it has always meant adopting it everywhere. Your hardware certifications don't transfer automatically. Your internal validation pipeline needs another quarter. Your change advisory board wants a rollback plan for something that hasn't historically rolled back gracefully.The result is that teams delay platform upgrades to avoid the OS migration, missing capabilities they actually need. The OS upgrade

Organizations can no longer rely on static operating models. AI capabilities expand daily, reshaping what humans and machines can do together. To capture that potential safely and at speed, companies need a new organizational capability: frontier operations. Frontier operations as an organizational differentiator and its connection with harness engineering and experiment trackingWhat is frontier operations?Frontier operations is the practice of continuously aligning evolving AI capabilities with business strategy through the adjusting of people, processes, and technology. It turns integration

As AI capabilities advance, they transform the security landscape in real time. To address these challenges at scale, no single company can act in isolation. We must bring together our respective expertise across the industry. That is why Red Hat is proud to participate as an inaugural member of the new Open Secure AI Alliance with NVIDIA. This initiative focuses on developing open tools and techniques to safeguard the AI stack—from open weight models to agent harnesses—to help drive safety, transparency, and broad scientific scrutiny. Open source models and frameworks act as vital defensi

I’m fortunate that I get to speak with hundreds of customers every year. These enterprises span the technology adoption curve—some who thrive on the leading edge, and others who prefer being as risk-averse as possible. But the AI era—ever-churning and bursting with exuberance—has united nearly all of them at this moment. Experiment time is over. Enterprises are focused on moving beyond theoretical AI pilots to operationalizing it at scale, optimizing costs, and governing its actions.Beyond those corporate mandates, which are important, I think what’s refreshing about my conversations

When integrating AI into your software development processes, the methodology you use to build software is as important as the models themselves. At Red Hat, we believe the true value of AI emerges when it is integrated into transparent, scalable, and reliable enterprise workflows. We're moving beyond traditional development practices toward a new agentic software development life cycle (SDLC). Within Red Hat AI Engineering, this approach treats AI agents not as isolated, automated tools, but as active, collaborative participants in the development lifecycle—helping drive progress from the i

If you are running containerized workloads on Red Hat OpenShift, then you already benefit from industry-leading process isolation. Security context constraints (SCC) restrict what pods can do, SELinux enforces mandatory access controls, cgroups limit resource consumption, and many permissive Linux capabilities are dropped by default. That said, all of these controls still operate on a shared host kernel. For the majority of workloads, this is perfectly fine. But when you are running untrusted code especially with privileged containers, you can use OpenShift sandboxed containers for an addition

Looking back a few months ago, it's wild to think about how much things have changed in the world of cybersecurity. Not long ago, running a few outdated application runtimes, pushing Common Vulnerabilities and Exposures (CVE) patches to "next month's sprint," or carrying end-of-life tech stacks was a normal, acceptable part of doing business. Today? That approach is an immediate open door for automated exploits. The timeline has collapsed, and fixing these vulnerabilities fast is now a matter of immediate survival for enterprise safety.The arrival of highly-capable frontier AI models like Clau

Whether you’re managing a few dozen servers or a massive, distributed Red Hat Enterprise Linux (RHEL) estate, Red Hat Satellite's architecture is engineered for growth. As an infrastructure expands, relying on a single, centralized Red Hat Satellite Server to handle every task can create significant resource constraints.To truly achieve high scalability and keep your environment running smoothly, your organization needs Red Hat Satellite Capsule Server. The latest enhancements leading up to Red Hat Satellite 6.19 make expanding enterprise infrastructure more stable and efficient.What is Red

Red Hat OpenShift Commons Gathering Salt Lake City 2026Register for the in-person Red Hat OpenShift Commons Gathering alongside KubeCon + CloudNativeCon North America. This event brings together the global OpenShift community-including users, contributors, partners, and Red Hat experts-to share knowledge, build connections, and learn from real production experiences. Learn more 5 new ways Red Hat helps partners maximize business valueRed Hat is rolling out updates to the Red Hat Partner Program designed to streamline your daily operations, safeguard your investments, and give you a clear fin

Agencies are keeping missions moving while technology, security requirements, data demands, and public expectations all continue to shift at once. That’s why this year’s Red Hat Government Symposium couldn’t have come at a better time. Bringing together leaders from federal, state, and local government agencies and higher education, panelists focused on how their organizations are managing disruption without losing momentum. Across sessions, speakers shared practical examples of how agencies are making thoughtful technology decisions to strengthen security, improve service delivery, and

At Red Hat, our goal for the ecosystem has always been simple: build a predictable, profitable partner program for our partners to scale their business. As always, we remain committed to the future of open source, and that means continuously investing in the partners who help us bring that future to life.Now, we are rolling out a series of updates to the Red Hat Partner Program designed to streamline your daily operations, safeguard your investments, and give you a clear financial runway to build new pipeline. Here are five ways we are enhancing the global partner experience to help you maximi

A secured agent that can't reach anything is just expensive autocomplete with a badge. In "Why prompt-level guardrails aren't enough," I walked through how Red Hat AI allows you to give each agent a cryptographic identity and lock down what it can touch. That solves the trust problem, but it doesn't solve the connectivity problem, and the connectivity problem is where I see most enterprise agent rollouts stall—not because the model fails, but because the plumbing does.In our previous articles, we talked about how 3 failures hit a single AI agent deployment overnight—43 duplicate tickets, $