Kubernetes Security
Initiatives to Re-Engineer Kubernetes for the Agentic AI Era Are Underway
A significant amount of re-engineering will be required before Kubernetes will be truly optimized for the agentic artificial intelligence (AI) era. At the KubeCon + CloudNativeCon North America 2026 conference this week, ...
The Attack Surface Nobody Owns- How Internal APIs Expand Cloud-Native Security Exposure
An endpoint that is not reachable from the internet is not the same as an endpoint that is protected. Ask a team to list its exposed attack surface, and the answer usually ...
How Base Images Impact Software Supply Chain Security in Kubernetes
As organizations scale their Kubernetes environments, the software supply chain becomes increasingly complex, interconnected, and vulnerable. One of the most overlooked yet foundational components of this supply chain is the base image ...
Container Runtime Security in Kubernetes: What Teams Overlook
Kubernetes security conversations tend to center on the things that happen on the left-hand side of the process. Scanning images, hardening Dockerfiles, and working with registry access controls all tend to frontload ...
Self-Healing Kubernetes Gets Real—and Risky: Running AI Agents on Amazon EKS
For years, “self-healing Kubernetes” meant a liveness probe restarting a crashed pod. In 2026 it means something far more literal: an autonomous agent that reads your cluster’s logs and metrics, forms a ...
Tigera Introduces Lynx, a Unified Control Plane for Kubernetes‑Native AI Agents
The first Kubernetes AI agent control plane is here. Tigera, best known for backing the open-source Calico networking and security stack for Kubernetes, is pushing beyond traditional container security with the launch ...
AWS Stretches Elastic Kubernetes Service to Full Private Networking
While setting up AWS’s managed Kubernetes service, many security administrators probably realized that true Zero Trust security wouldn’t be possible if outbound K8s traffic still must flow over the AWS backbone to ...
Why Kubernetes Admission Control Is Really a Security UX Problem
Most Kubernetes admission webhooks treat security as binary: accept the configuration, or reject it. That binary thinking has matured an entire category of policy engines (OPA Gatekeeper, Kyverno, ValidatingAdmissionPolicy with CEL) that ...
Why Developers Struggle with Container Security, and How to Help Them Do Better
More than a decade has passed since Docker (the platform that brought software containers mainstream) swept onto the scene, transforming the way many organizations build and deploy applications. Yet, when it comes ...
Edera Advisory Highlights Remote Code Execution Flaw in Kubernetes
Edera, a provider of a platform for securing container runtime environments, this week published an advisory that notes there is a design flaw that could enable full remote code execution (RCE) in ...
