Cloud-Native Security
Docker Inc., Snyk Ally to Improve Containerized App Security
Docker Inc. is the latest provider of tools for building containerized applications to partner with Snyk following an alliance between the two companies revealed this week. Justin Graham, vice president of products ...
Open Source Tern Locks Dockerfile to Container Image
The team behind the open source Tern tools for scanning container images has released an update that adds the ability to lock the base image of a Dockerfile to the packages installed ...
Aqua Security Extends Container Security Platform
Aqua Security today launched a tool today that dynamically scans container environments to discover more sophisticated forms of malware that often elude static analysis tools. Rani Osnat, vice president of strategy for ...
Why Running a Privileged Container is Not a Good Idea
A privileged container has all the capabilities a host can perform. And that’s a bad idea. Containers are not, by any means, new. They have been consistently and increasingly adopted in the ...
Kubernetes Security: Key Factors to Consider
Here are six ways organizations can increase their Kubernetes security Containers and Kubernetes adoption have been phenomenal in the last year. According to the recently published CNCF report, container adoption has jumped ...
Aqua Security: More Platforms Add Trivy Container Scanning Tool
Aqua Security today revealed that its open source Trivy container scanning software is now available by default in a growing number of container platforms. Currently available under a royalty-free Apache 2 license, ...
Anchore Raises $20M to Expand Kubernetes Security Reach
Anchore this week announced it has received an additional $20 million in funding as the battle for container security supremacy intensifies in 2020. Startups such as Anchore are finding themselves competing with ...
Octarine Adds 2 Open Source Projects to Secure Kubernetes
Octarine announced today it has launched two open source projects intended to enhance Kubernetes security. The first project is kube-scan, a workload and assessment tool that scans Kubernetes configurations and settings to ...
CNCF Funds Cybersecurity Bug Bounty Initiative for Kubernetes
The Cloud Native Computing Foundation (CNCF) has announced it is funding a bounty program for discovering security bugs in any distribution of Kubernetes. Maya Kaczorowski, product manager for container security at Google, ...
Best of 2019: 5 Ways to Chaos Test Kubernetes
As we close out 2019, we at Container Journal wanted to highlight the five most popular articles of the year. Following is the fourth in our weeklong series of the Best of ...
