Zscaler collaborates with IBM and Red Hat to protect private applications from frontier ai-powered threats. New collaboration combines Zscaler Autonomous Application Shield with Lightwell from IBM and Red Hat to help organizations reduce exposure between vulnerability disclosure and patch deployment through inline protection and validated remediation. October 05, 2026 08:00 ET | Source: Zscaler, Inc. SAN JOSE, Calif., Oct. 05, 2026 (GLOBE NEWSWIRE) - Zscaler, Inc. (NASDAQ: ZS), the cybersecurity platform for the AI era, today announced a collaboration with IBM and Red Hat to help organizations protect private applications during the period between vulnerability disclosure and patch deployment. The collaboration combines Zscaler Autonomous Application Shield, delivered through the Zscaler Zero Trust Exchange(TM) security platform, with Lightwell from IBM and Red Hat to deliver adaptive, application-specific protection with validated software remediation in a single coordinated response. "Lightwell helps keep open source safe by patching and fixing these vulnerabilities at machine speed. Collaborating with partners like Zscaler brings..." "As attackers weaponize newly disclosed vulnerabilities faster than enterprises can respond, organizations need a way to protect private applications..." "Our collaboration with IBM and Red Hat brings together inline, application-specific protection and validated remediation to help customers reduce risk during..." "AI is shrinking the window between vulnerability discovery and vulnerability exploitation. A window that was months or weeks is now hours and minutes," The economics of exploitation have shifted. Capabilities that once required elite skills and weeks of manual effort are now widely available, and attackers are weaponizing newly disclosed vulnerabilities faster than enterprise patch cycles can respond. According to Mandiant's M-Trends 2026 report, the mean time to exploit a vulnerability has fallen below zero, meaning vulnerabilities are increasingly exploited before a public patch exists. Patching remains necessary, but on its own it can no longer keep pace. Organizations need protection that can be applied at machine speed while remediation is prepared and deployed. This collaboration extends Zscaler's protection-first operating model for private applications, which assumes a remediation window will always exist and builds resilience around it: hide applications with Zscaler Private Access(TM)(ZPA(TM)) so they are harder to discover and target, segment access with Autonomous User-to-App Segmentation so a foothold does not become broad reachability, and shield reachable applications with Autonomous Application Shield so exploit attempts are stopped inline while the root cause is fixed. By uniting Zscaler Autonomous App Shield with Lightwell, the collaboration provides customers a coordinated path from immediate protection to durable fix. Operating through the Zero Trust Exchange, Zscaler App Connectors continuously perform safe assessments of each private application's exposure points and vulnerabilities. The Zscaler cloud individually evaluates each application, ensuring only necessary protections are applied. When a new vulnerability emerges, adaptive protections can be applied inline and in real time, without waiting for a patch. Through this collaboration, Lightwell helps Zscaler defend its customers from potential cyber threats, with Zscaler blocking exploit attempts immediately at the network level. Lightwell then provides validated remediations for affected open source software, enabling customers to fix the underlying flaw at the source. "As attackers weaponize newly disclosed vulnerabilities faster than enterprises can respond, organizations need a way to protect private applications immediately while fixes are being prepared and deployed," said Joby Menon, Senior Vice President of Product Management at Zscaler. "Our collaboration with IBM and Red Hat brings together inline, application-specific protection and validated remediation to help customers reduce risk during that gap." Through this collaboration, Zscaler, IBM, and Red Hat will deliver integrated capabilities across the application security lifecycle, addressing critical needs including: * Exposure Discovery: Providing a current understanding of a private application's actual risk profile, updated as fast as applications change, rather than relying on periodic scans. * Preemptive, Application-Specific Protection: Bridging the gap between vulnerability and patching. Applying only the protections a given application needs during the gap between disclosure and patching, reducing exposure while remediation is underway and avoiding one-size-fits-all policy noise. * Machine-Speed Response: Deploying protections inline and in real time when a new vulnerability emerges, informed by global threat intelligence from across Zscaler's worldwide customer base. * Validated Source-Level Remediation: Delivering tested software fixes through Lightwell so organizations can resolve the underlying vulnerability, with advisory and deployment support to prioritize and validate protections across complex environments. "AI is shrinking the window between vulnerability discovery and vulnerability exploitation. A window that was months or weeks is now hours and minutes," said Gunnar Hellekson, vice president and general manager, Lightwell, Red Hat. "Lightwell helps keep open source safe by patching and fixing these vulnerabilities at machine speed. Collaborating with partners like Zscaler brings Lightwell's capabilities to the forefront of enterprise networks, mitigating potential vulnerabilities head-on while patches are applied to critical systems." Autonomous Application Shield is currently available through an Early Access Program. Availability, capabilities, and timing of the collaboration described herein are subject to change. For a deeper dive into how Zscaler is helping protect against AI threats, please visit this blog. Forward-Looking Statements This press release contains forward-looking statements that are based on our management's beliefs and assumptions and on information currently available to our management. These forward-looking statements include the expected performance and benefits of Zscaler Autonomous Application Shield and its collaboration with IBM and Red Hat, including the delivery of adaptive, machine-speed protection for private applications. These forward-looking statements are subject to the safe harbor provisions created by the Private Securities Litigation Reform Act of 1995. A significant number of factors could cause actual results to differ materially from statements made in this press release, including those factors related to Zscaler's ability to achieve partner and customer adoption of Autonomous Application Shield and the collaboration described herein. Additional risks and uncertainties are set forth in our most recent Annual Report on Form 10-K filed with the Securities and Exchange Commission ("SEC") on September 3, 2026, which is available on our website at ir.zscaler.com and on the SEC's website at www.sec.gov. Any forward-looking statements in this release are based on the limited information currently available to Zscaler as of the date hereof, which is subject to change, and Zscaler will not necessarily update the information, even if new information becomes available in the future. About Zscaler Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange(TM) platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world's largest in-line cloud security platform. Media Contacts Nick Gonzalez, Director of Public Relations, [email protected]

Critical Red Hat Satellite flaw could enable root password theft and code execution attacks. Red Hat has fixed a high-impact vulnerability in Red Hat Satellite that could allow a low-privileged authenticated user to access sensitive host information, including root passwords. Under unsafe configurations, the flaw could also escalate to arbitrary command execution as the Foreman service account. Tracked as CVE-2026-96659, the issue affects the Foreman component used by Red Hat Satellite for infrastructure provisioning, configuration management, and lifecycle operations. Red Hat assigned the vulnerability an Important severity rating and a CVSS v3 score of 9.1. The vulnerability was publicly disclosed on October 1, 2026. The attacker needs network access and a valid low-privileged account, but does not require user interaction. Successful exploitation can have a high confidentiality impact. The flaw stems from an authorization weakness in Foreman template preview endpoints. A user assigned only the Viewer role can submit crafted requests to these endpoints and retrieve information that should be available only to higher-privileged administrators. Red Hat Satellite vulnerability. According to Red Hat, the affected endpoints can expose sensitive host attributes. This may include host root passwords, creating a serious risk for organizations that use Satellite to provision or manage large fleets of Red Hat Enterprise Linux systems. The issue is classified under CWE-267, an access-control weakness that can allow users to access restricted features, sensitive data, administrative functions, or identities beyond their assigned permissions. A compromised Viewer account could therefore become an entry point for broader environment exposure. Stolen root credentials could be used to access managed servers, move laterally across a network, alter workloads, or establish persistence. The primary impact of CVE-2026-96659 is unauthorized information disclosure. However, Red Hat warned that the security impact becomes more severe when Foreman template Safemode protections have been turned off or can be circumvented. In such insecure configurations, an attacker may be able to execute arbitrary commands as the Foreman service account. This could give an attacker a foothold on the Satellite server itself, which is particularly concerning because Satellite often holds credentials, host inventory data, provisioning templates, configuration details, and content-management access for enterprise Linux infrastructure. Red Hat's Satellite 6.16 advisory also lists CVE-2026-96658, a separate Foreman Safemode bypass flaw that can lead to remote code execution. Organizations should treat these related Foreman security issues as a priority patching event rather than addressing CVE-2026-96659 in isolation. Red Hat has released fixes for the following products: For Satellite 6.16, Red Hat released Foreman version 3.12.0.23-1 for RHEL 8 and RHEL 9 as part of the Satellite 6.16.14 update. The advisory also contains fixes for several other security flaws affecting Foreman and related Satellite components. Administrators should apply the relevant Red Hat security errata immediately, review all Viewer-role accounts, and remove unnecessary access. They should also verify that Foreman Safemode protection remains enabled and investigate template preview activity for unusual requests or access to sensitive host attributes. Cut every SOC alert investigation by 21 min. Power your SOC with instant IOC context for immediate response: Integrate TI Lookup in your SOC The post critical Red Hat Satellite flaw could enable root password theft and code execution attacks appeared first on cyber security News. Related cyber security News posts. A serious security vulnerability has been discovered in Red Hat's NetworkManager-libreswan plugin that could allow local attackers to escalate privileges and gain root access to Linux systems. The flaw tracked as CVE-2024-9050 has received a CVSS base score of 7.8, indicating its high severity. The security issue stems from the... In "Cybersecurity News - Original News Source is cybersecuritynews.com" Red Hat has disclosed a critical vulnerability in the Red Hat Build of Keycloak that could allow unauthenticated remote attackers to take over arbitrary user accounts. Tracked as CVE-2026-18963, the flaw affects the password recovery process and carries a CVSS v3.1 score of 9.1. The vulnerability exists in the reset-credentials... In "Cybersecurity News - Original News Source is cybersecuritynews.com" A critical use-after-free vulnerability has been discovered in the Linux kernel's netfilter subsystem. This vulnerability could potentially allow local, unprivileged users with CAP_NET_ADMIN capability to escalate their privileges. The flaw, identified in the upstream commit 5f68718b34a5 ("netfilter: nf_tables: GC transaction API to avoid race with control plane"), can cause a... In "Cybersecurity News - Original News Source is cybersecuritynews.com"