DevSecOps
Why Developers Struggle with Container Security, and How to Help Them Do Better
More than a decade has passed since Docker (the platform that brought software containers mainstream) swept onto the scene, transforming the way many organizations build and deploy applications. Yet, when it comes ...
Black Box Testing APIs in Microservices: Why Your Tests Pass but Your System Still Fails
The CI pipeline is green. Every API test passed. The team ships to production, and within forty minutes, incident alerts start firing. A downstream payment service is returning unexpected null values on ...
How to Implement Shift-Left Security in Cloud-Native Applications?
Most security teams still treat cloud-native security as something to handle after deployment. That approach is costing them more than they realize. According to research, the average cost of a data breach ...
Where DevOps Pipelines Break: Real Attack Paths in Cloud-Native CI/CD
While traditional security focuses on perimeters, modern attackers are moving upstream to the CI/CD pipeline. By compromising the build process rather than the final product, they can inject malicious code into trusted ...
Survey Surfaces Raft of Container Security Challenges
A BellSoft survey reveals gaps in container security practices, showing that human error, limited vulnerability scanning, and infrequent patching continue to expose cloud-native environments to risk ...
The Future of Workload Isolation with Emily Long
Edera CEO Emily Long, in the wake of the company picking up an additional $15 million in funding, explains why a new approach to isolating workloads is needed to better secure IT ...
Tigera Adds Vulnerability Management Capabilities to Calico Platform
Tigera today extended the reach of its container networking and security platform for cloud-native application environments based on open-source Calico software into the realm of vulnerability management. Dhiraj Sehgal, director of product ...
Survey Surfaces Cloud-Native Application Security Challenges
A global survey of 600 DevOps, engineering and security professionals finds more than two-thirds (67%) reporting their organization has delayed or slowed application development as a result of security concerns. Conducted by ...
Isovalent Strengthens Cloud Native Security via Tetragon Enterprise Update
The goal is to provide an important cybersecurity piece to the cloud-native computing puzzle ...
JFrog Reveals Docker Hub Compromise Spanning Millions of Repositories
Malware attacks against millions of Docker Hub repositories have been underway since 2021. Assume all the content you host on a publicly accessible repository might be compromised ...
