DevSecOps
RapidFort Creates Multiple Alliances to Better Secure Cloud-Native Applications
RapidFort, a provider of curated open source container images, has allied with both Wiz and Aqua Security to streamline DevSecOps workflows for organizations building and deploying cloud-native applications. Additionally, RapidFort has inked ...
Why Kubernetes RBAC Misconfigurations Are the Easiest Privilege Escalation You’ll Ever Find
Ask any penetration tester which part of a Kubernetes assessment reliably produces a finding, and RBAC comes up almost every time. Not because Kubernetes’ permission model is poorly designed — it’s genuinely ...
RapidFort Allies with CrowdStrike to Harden Container Images
RapidFort this week revealed it has integrated its container vulnerability remediation platform with the cloud security platform provided by CrowdStrike. Announced at the Fal.Con 2026 event hosted by CrowdStrike, the integration enables ...
From Controls to Continuous Assurance: Rethinking GRC for Cloud-Native Environments
The standard process of building governance, risk, and compliance (GRC) programs has been straightforward: define a control, document a control, test the control on a regular basis, and generate a report for ...
The AI Remediation Bottleneck: Why the Software Supply Chain Demands Radical Openness
For years, the DevSecOps movement has operated on a foundational premise that if you detect a vulnerability, you triage it, patch it, and redeploy. This cycle assumes that our capability to remediate ...
Together, Edera and Minimus Claim They Can Protect Your Software From AI Hackers
Hopefully, they can deliver because AI programs like Anthropic’s Mythos AI are cracking open programs faster than an otter can shuck oysters. MINNEAPOLIS — At Open Source Summit North America, Edera, a ...
OWASP Has Adopted DockSec and the Cloud Security Community Is Taking Notice
With more than 13,000 downloads across more than 40 countries, DockSec has earned its place as an OWASP Incubator Project by doing something most container security tools have not managed: closing the ...
Survey Surfaces Raft of Container Security Challenges
A BellSoft survey reveals gaps in container security practices, showing that human error, limited vulnerability scanning, and infrequent patching continue to expose cloud-native environments to risk ...
Flare Finds 10,000 Docker Hub Images Exposing Secrets
Researchers found thousands of Docker images exposing API keys and tokens, revealing how secrets sprawl, shadow IT, and poor hygiene fuel modern breaches ...
AI Security in the Cloud-Native DevSecOps Pipeline
As AI reshapes DevSecOps, speed and efficiency collide with new, often hidden, security risks. From machine-generated code flaws to model supply chain threats, the future of cloud-native security depends on blending AI’s ...
