Cloud-Native Security
ActiveState Allies with Docker to Harden Software Artifacts
ActiveState and Docker, Inc. today revealed they will both resell the hardened libraries and images that each company curates. The overall goal is to make it simpler for application development teams to ...
A Container Image Can Be Vulnerability-Free and Still Not Be Trustworthy
Zero is a powerful number in container security. Run a container image through a tool such as Trivy or Docker Scout and imagine the result comes back with no known vulnerabilities. It ...
From Controls to Continuous Assurance: Rethinking GRC for Cloud-Native Environments
The standard process of building governance, risk, and compliance (GRC) programs has been straightforward: define a control, document a control, test the control on a regular basis, and generate a report for ...
Prompt Injection in Cloud-Native AI Is Now an Access Control Problem
For a long time, prompt injection was treated like other model behavior problems, such as jailbreaks or strange responses. The usual fix was to improve the system prompt, add stronger filters, or ...
How Base Images Impact Software Supply Chain Security in Kubernetes
As organizations scale their Kubernetes environments, the software supply chain becomes increasingly complex, interconnected, and vulnerable. One of the most overlooked yet foundational components of this supply chain is the base image ...
Kubernetes Key Management Streamlined by HashiCorp Vault Plug-In
IBM HashiCorp has released a plug-in that allows Kubernetes clusters to use HashiCorp’s Vault Enterprise as an external key management service (KMS), eliminating the need to store unencrypted passwords or bog Kubernetes ...
Container Runtime Security in Kubernetes: What Teams Overlook
Kubernetes security conversations tend to center on the things that happen on the left-hand side of the process. Scanning images, hardening Dockerfiles, and working with registry access controls all tend to frontload ...
Rust Rewrite Readies Kata Containers for Agent Sandboxing
The OpenInfra Foundation has released version 4 of Kata Containers, which arrives with a new Rust-based default runtime that brings new memory safety and performance gains. With the Rust rewrite, the Foundation ...
Building a Secure Software Development Lifecycle (SSDLC) for Cloud-Native Teams
As cloud-native architectures continue to redefine how applications are built and deployed, security must evolve alongside them. Often bolted on at the end of development, traditional approaches are no longer sufficient in ...
Tigera Introduces Lynx, a Unified Control Plane for Kubernetes‑Native AI Agents
The first Kubernetes AI agent control plane is here. Tigera, best known for backing the open-source Calico networking and security stack for Kubernetes, is pushing beyond traditional container security with the launch ...
