Security

I wrote this for TuxCare on building a FIPS and FedRAMP-ready environment on community Linux, and how TES fills the gaps the base OS can’t.

I wrote this for TuxCare to break down the Essential, Enhanced, and Custom support tiers so teams can match coverage to their real risk profile.

I wrote this for TuxCare: a fact-based comparison of TES against Red Hat, SUSE, Canonical, and Oracle across pricing, rebootless patching, and compliance.

I wrote this for TuxCare to announce KernelCare Agent v3, which introduces signed patch validation while keeping live patching disruption-free.

I wrote this for TuxCare on the relaunch of Enterprise Support, which now covers AlmaLinux and Rocky Linux together with 24x7 support and compliance-ready patching.

I wrote this for TuxCare to explain what patch-aware scanning means, why traditional scanners get Linux wrong, and how it makes audits far less painful.

I wrote this for TuxCare to show how ePortal can proxy Radar scans, so locked-down fleets route data through one internal server instead of each host phoning home.

I wrote this for TuxCare on building real-world Radar routines, from tagging systems by risk zone to trading bloated spreadsheets for audit-ready reports.

I wrote this for TuxCare to set expectations for your first Radar scan, including why fewer results is a feature, not a bug.

I wrote this for TuxCare to introduce Radar, a lightweight, patch-aware CVE scanner for Linux that installs from the command line and skips the false positives.

In episode three, Richard and I recap the build so far and dig into patching, scheduled jobs, and CVE mitigation with Red Hat Satellite.

Nate Lager and I sit down with Yubico’s Jonathan Hanlon and Dave Pham to add FIDO passkeys to RHEL users and log in with a YubiKey through Identity Manager.