> Same goals, different clocks: What Red Hat’s 2025 Risk Report reveals about global compliance gaps

In April 2026, Red Hat’s Product Security team published its annual Risk Report . I encourage everyone involved in building, shipping, securing, or regulating software to read it–not just for the vulnerability counts, but for what the data collectively says about the modern security environment we’re all operating in.Here’s the short version: 3,781 security advisories were issued in 2025, an almost linear upward trend year over year. Software supply chain attacks increased 54% compared to 2024. We tracked active exploitation of vulnerabilities that were first disclosed years earlier—