Red Hat: 97% of organizations hit by cloud-native security incidents

Red Hat's "State of Cloud-Native Security 2026" report found 97% of organizations reported at least one cloud-native security incident in the past year, and 74% delayed application deployments over security concerns. The supply chain is now the main attack surface: the May 2026 TanStack attack compromised 42 npm packages and two OpenAI employee devices.

• 97% of organizations reported a cloud-native security incident in the past year
• 74% delayed or slowed application deployments over security concerns
• TanStack attack: 42 npm packages and 84 malicious versions in six minutes
• Dell CSM flaws before 1.17.0 allowed admin access to the whole cluster