devsecops, supply chain, Kubernetes, practices, DevSecOps, JFrog, DevSecOps, Snyk Cerbos DevSecOps authorization incident Deepfence misconfigured Kubernetes security

CyberArk Discloses Potential Security Flaw in Kubernetes Agent Software

CyberArk, a provider of access management tools, today issued an advisory describing multiple potential misconfigurations of kubelet, the agent software that registers a Kubernetes node with an application programming interface (API) server, ...
containers, AI, Kubernetes, cloud-native security IBM Kubernetes

The Security Case for Containerized Cloud Architecture

Cloud-based containerized architecture is critical for cybersecurity and is especially relevant in the era of remote work As COVID-19 cases spike across the country, some companies have already made the difficult choice ...
Kubernetes, serverless Kubernetes backup and recovery

Backup and DR in the Age of GitOps

Whether you call it GitOps, infrastructure as code (IaC) or simply using a CI/CD pipeline to automatically deploy changes to an application, we can all agree that moving to a model where ...
Syslabs open IBM container storage

Palo Alto Networks Discloses Kata Container Flaws

At the online Black Hat USA 2020 conference today, researchers from the Unit 42 arm of Palo Alto Networks disclosed how they had enabled malicious code to escape from a Kata Container ...
Tigera, cloud-native, ulnerability containers

Common Container and Kubernetes Vulnerabilities

As Kubernetes gains more prominence, concern is mounting over how we gauge its effectiveness and mitigate container security vulnerabilities. Such vulnerabilities could leave a cluster unsecured or a container compromised, open to ...
container security

Container Security Best Practices Taking Shape

Almost 20 years after containers’ inception, container security is becoming top of mind. Here are some things to consider Now that containers are enjoying a notable spike in popularity, it can be ...
Lacework Red Hat Aqua Security

Aqua Security Surfaces Threat to Container Hosts

Aqua Security this week reported a new type of cyberattack that exploits Docker application programming interfaces (APIs) to build and run a malicious container image on the host. Asaf Morag, lead data ...
Docker, secrets, gitguardian Thycotic Kubernetes secrets

Thycotic Extends Secrets Management Reach to Kubernetes

Thycotic, a provider of privileged access management (PAM) platform, today announced its support for Kubernetes. The company currently provides two types of PAM platforms for application developers. The first is DevOps Secrets ...
cryptojacking Docker Hub

Docker Hub Distributing Cryptomining Malware?

A pair of cybersecurity reports published this week suggests the level of cryptomining malware lurking in the Docker Hub repository is potentially greater than most IT teams realize. Aqua Security, a provider ...
cloud-native

Managing the Security of Cloud-Native Architectures

Container-based and serverless cloud-native architectures represent the most significant computing advancement for deploying enterprise applications since VMware introduced its first product, Workstation 1.0, in 1999. While these technologies offer many benefits in ...