DevSecOps

phishing OWASP Kubernetes security Veracode key management container security CNCF security secure Kubernetes

Kubernetes Phishing: Preventing Social Engineering in Your K8s Environment

As Kubernetes becomes a mainstream platform for operating mission-critical applications, it is increasingly targeted by cybercriminals ...
| | cloud native, credentials, identity, kubernetes, phishing, security
KSOC Solo.io access Elastic Kubernetes

KSOC Adds Tools to Strengthen Kubernetes Security

KSOC made generally available a zero-trust policy generator to make it simpler to manage RBAC for Kubernetes clusters ...
| | access control, IAM, KSOC, RBAC, security
Kubernetes Made Simple – A Deep Dive Into TLS Certificates

Kubernetes Made Simple – A Deep Dive Into TLS Certificates

TLS certificate management in Kubernetes can be tricky. Here's everything you need to know to stay secure ...
| | certificates, cloud native security, kubernetes, TLS
Kubernetes, practices, DevSecOps, JFrog, DevSecOps, Snyk Cerbos DevSecOps authorization incident Deepfence misconfigured Kubernetes security

Snyk Discloses ‘Leaky Vessels’ Vuln Requiring Docker Command Line Tool Fix

Snyk identified four vulnerabilities, collectively dubbed “Leaky Vessels,” that AppDev teams should address by updating the runc command line tool ...
| | command line, container security, containers, kubernetes, leaky vessels, Snyk
Kubernetes security FusionAuth secure container images

Kubernetes Security Best Practices for 2024

Here's what you should be focusing on in 2024 to keep your Kubernetes environments secure ...
| | cloud native, cloud native security, container security, containers, kubernetes, security
CloudCasa Sysdig containers CommVault

Sysdig Report Surfaces Major Container Security Challenges

A cloud-native security report from Sysdig found 91% of runtime scans fail and only 2% of granted permissions are being used in container environments ...
| | cloud native, container security, permissions, security, Sysdig
Wasm, Red Hat, telcommunications, Dapr application security distributed cloud mobile apps

App Security Testing in Containerized Environments: Tips and Tricks

Development teams should prioritize application security testing, whether their applications are monoliths or containerized ...
| | application security, AppSec, cloud-native applications, DevSecOps, kubernetes, microservices
container security, vulnerabilities, Diagrid, APIs, Sysdig APIs container security Apiiro CrowdStrike kubernetes Unit 42 container containerization security

Report Surfaces High Level of Kubernetes Insecurity in the Cloud

Kubernetes clusters made available by the three major cloud service providers are vulnerable to a wide range of potential cyberattacks ...
| | cloud native security, clusters, Cymulate, kubernetes, security
security IaC containers secure

Security in Container Orchestration

As containers become popular cloud-native software development, ensuring their security is the highest priority ...
| | cloud native security, container security, containers, DevSecOps, secure images
Docker, Trend Micro, SIEM attack Aqua Security CyberArk pen testing Accurics

SIEM for Containerized Environments

SIEM can help address some of the key security challenges of Docker, Kubernetes and related technologies ...
| | cloud native security, container security, containers, security, SIEM