DevSecOps Archives

Docker Hub, container images, Ensuring Container Security

JFrog Reveals Docker Hub Compromise Spanning Millions of Repositories

Malware attacks against millions of Docker Hub repositories have been underway since 2021. Assume all the content you host on a publicly accessible repository might be compromised ...

Mike Vizard | April 30, 2024 | docker, docker hub, JFrog, malware, malware campaign

Red Hat Adds Developer Tools to Extend DevSecOps Reach

Red Hat added three new developer tools, expanding its DevSecOps portfolio for building secure cloud-native applications ...

Mike Vizard | April 18, 2024 | developer tools, DevSecOps, red hat

devsecops, supply chain, Kubernetes, practices, DevSecOps, JFrog, DevSecOps, Snyk Cerbos DevSecOps authorization incident Deepfence misconfigured Kubernetes security

Revolutionizing Software Development With Cloud-Native DevSecOps

DevSecOps and cloud-native architectures provide robust tools for monitoring and managing cloud platform resources ...

Swetha Yalamanchili | March 28, 2024 | architecture, CI/CD, cloud native, DevSecOps, pipeline, security

Closing the Gap With ITDR for Cloud-Native Security and Kubernetes RBAC

Here's what is required to apply identity threat detection and response (ITDR) to cloud-native security with Kubernetes RBAC ...

Jimmy Mesta | March 21, 2024 | cloud native security, identity, ITDR, kubernetes, RBAC, role-based access control

Kubernetes Is Gaining Momentum, but Security Still Lags Behind

While many organizations understand the potential benefits of Kubernetes, fewer understand the platform's cybersecurity vulnerabilities ...

Michael Ioffe | March 5, 2024 | AppSec, cloud native security, kubernetes, risk, security

phishing OWASP Kubernetes security Veracode key management container security CNCF security secure Kubernetes

Kubernetes Phishing: Preventing Social Engineering in Your K8s Environment

As Kubernetes becomes a mainstream platform for operating mission-critical applications, it is increasingly targeted by cybercriminals ...

Gilad David Mayaan | March 1, 2024 | cloud native, credentials, identity, kubernetes, phishing, security

KSOC Adds Tools to Strengthen Kubernetes Security

KSOC made generally available a zero-trust policy generator to make it simpler to manage RBAC for Kubernetes clusters ...

Mike Vizard | February 28, 2024 | access control, IAM, KSOC, RBAC, security

Kubernetes Made Simple – A Deep Dive Into TLS Certificates

TLS certificate management in Kubernetes can be tricky. Here's everything you need to know to stay secure ...

Svenja Michal | February 19, 2024 | certificates, cloud native security, kubernetes, TLS

Snyk Discloses ‘Leaky Vessels’ Vuln Requiring Docker Command Line Tool Fix

Snyk identified four vulnerabilities, collectively dubbed “Leaky Vessels,” that AppDev teams should address by updating the runc command line tool ...

Mike Vizard | February 2, 2024 | command line, container security, containers, kubernetes, leaky vessels, Snyk