DevSecOps
Echo Acquires Hardened Container Assets from Minimus
Echo today revealed it has acquired technology assets from Minimus, a provider of hardened open source container images, that earlier this week revealed it is shutting down. Those assets will later be ...
Docker Networking in Production: What Most Teams Get Wrong
Docker makes networking feel simple. You run a container, expose a port, add a –network flag and things connect. In development, that is enough. In production, it is where teams quietly accumulate ...
Why Developers Struggle with Container Security, and How to Help Them Do Better
More than a decade has passed since Docker (the platform that brought software containers mainstream) swept onto the scene, transforming the way many organizations build and deploy applications. Yet, when it comes ...
Black Box Testing APIs in Microservices: Why Your Tests Pass but Your System Still Fails
The CI pipeline is green. Every API test passed. The team ships to production, and within forty minutes, incident alerts start firing. A downstream payment service is returning unexpected null values on ...
How to Implement Shift-Left Security in Cloud-Native Applications?
Most security teams still treat cloud-native security as something to handle after deployment. That approach is costing them more than they realize. According to research, the average cost of a data breach ...
Where DevOps Pipelines Break: Real Attack Paths in Cloud-Native CI/CD
While traditional security focuses on perimeters, modern attackers are moving upstream to the CI/CD pipeline. By compromising the build process rather than the final product, they can inject malicious code into trusted ...
Survey Surfaces Raft of Container Security Challenges
A BellSoft survey reveals gaps in container security practices, showing that human error, limited vulnerability scanning, and infrequent patching continue to expose cloud-native environments to risk ...
The Future of Workload Isolation with Emily Long
Edera CEO Emily Long, in the wake of the company picking up an additional $15 million in funding, explains why a new approach to isolating workloads is needed to better secure IT ...
Tigera Adds Vulnerability Management Capabilities to Calico Platform
Tigera today extended the reach of its container networking and security platform for cloud-native application environments based on open-source Calico software into the realm of vulnerability management. Dhiraj Sehgal, director of product ...
Survey Surfaces Cloud-Native Application Security Challenges
A global survey of 600 DevOps, engineering and security professionals finds more than two-thirds (67%) reporting their organization has delayed or slowed application development as a result of security concerns. Conducted by ...
