DevSecOps

Closing the Gap With ITDR for Cloud-Native Security and Kubernetes RBAC

Closing the Gap With ITDR for Cloud-Native Security and Kubernetes RBAC

Here's what is required to apply identity threat detection and response (ITDR) to cloud-native security with Kubernetes RBAC ...
| | cloud native security, identity, ITDR, kubernetes, RBAC, role-based access control
Kubernetes Is Gaining Momentum, but Security Still Lags Behind

Kubernetes Is Gaining Momentum, but Security Still Lags Behind

While many organizations understand the potential benefits of Kubernetes, fewer understand the platform's cybersecurity vulnerabilities ...
| | AppSec, cloud native security, kubernetes, risk, security
phishing OWASP Kubernetes security Veracode key management container security CNCF security secure Kubernetes

Kubernetes Phishing: Preventing Social Engineering in Your K8s Environment

As Kubernetes becomes a mainstream platform for operating mission-critical applications, it is increasingly targeted by cybercriminals ...
| | cloud native, credentials, identity, kubernetes, phishing, security
KSOC Solo.io access Elastic Kubernetes

KSOC Adds Tools to Strengthen Kubernetes Security

KSOC made generally available a zero-trust policy generator to make it simpler to manage RBAC for Kubernetes clusters ...
| | access control, IAM, KSOC, RBAC, security
Kubernetes Made Simple – A Deep Dive Into TLS Certificates

Kubernetes Made Simple – A Deep Dive Into TLS Certificates

TLS certificate management in Kubernetes can be tricky. Here's everything you need to know to stay secure ...
| | certificates, cloud native security, kubernetes, TLS
devsecops, supply chain, Kubernetes, practices, DevSecOps, JFrog, DevSecOps, Snyk Cerbos DevSecOps authorization incident Deepfence misconfigured Kubernetes security

Snyk Discloses ‘Leaky Vessels’ Vuln Requiring Docker Command Line Tool Fix

Snyk identified four vulnerabilities, collectively dubbed “Leaky Vessels,” that AppDev teams should address by updating the runc command line tool ...
| | command line, container security, containers, kubernetes, leaky vessels, Snyk
Kubernetes security FusionAuth secure container images

Kubernetes Security Best Practices for 2024

Here's what you should be focusing on in 2024 to keep your Kubernetes environments secure ...
| | cloud native, cloud native security, container security, containers, kubernetes, security
Sysdig Report Surfaces Major Container Security Challenges

Sysdig Report Surfaces Major Container Security Challenges

A cloud-native security report from Sysdig found 91% of runtime scans fail and only 2% of granted permissions are being used in container environments ...
| | cloud native, container security, permissions, security, Sysdig
Dapr, Wasm, Red Hat, telcommunications, Dapr application security distributed cloud mobile apps

App Security Testing in Containerized Environments: Tips and Tricks

Development teams should prioritize application security testing, whether their applications are monoliths or containerized ...
| | application security, AppSec, cloud-native applications, DevSecOps, kubernetes, microservices
Report Surfaces High Level of Kubernetes Insecurity in the Cloud

Report Surfaces High Level of Kubernetes Insecurity in the Cloud

Kubernetes clusters made available by the three major cloud service providers are vulnerable to a wide range of potential cyberattacks ...
| | cloud native security, clusters, Cymulate, kubernetes, security