Wednesday, September 18, 2024

Cloud Native Now

MENUMENU

Home
Webinars
Podcasts
About
Sponsor

MENUMENU

News
- Latest News
- News Releases
Cloud-Native Development
Cloud-Native Platforms
Cloud-Native Networking
Cloud-Native Security

Hot Topics

Tigera Adds Vulnerability Management Capabilities to Calico Platform
Komodor Adds Generative AI Tool to Simplify Kubernetes Management
Kubernetes in Multi-Cloud Environments
Docker Inc. Hikes Subscription Pricing in Return for Providing Increased Tool Access
Mitigating DDoS Attacks in Cloud-Native Applications

Observability

Isovalent Strengthens Cloud Native Security via Tetragon Enterprise Update

The goal is to provide an important cybersecurity piece to the cloud-native computing puzzle ...

Mike Vizard | May 3, 2024 | cncf, Isovalent, linux, open source, Tetragon

New Relic cloud-native no-code

New Relic Adds Native Kubernetes Support to Observability Platform

New Relic is now providing native Kubernetes support for OpenTelemetry and Prometheus-instrumented hosts ...

Mike Vizard | March 20, 2024 | cloud native, kubernetes, New Relic, observability, OpenTelemetry, Prometheus

10 Hot Takes Ahead of KubeCon EU 2024

Ahead of KubeCon + CloudNativeCon EU 2024, here's what's at the top of today's savvy cloud-native and DevOps thought leaders' minds ...

Bill Doerrfeld | March 15, 2024 | application development, cloud native, compliance, IaC, KubeCon, OpenTelemetry, security

Cilium containerized network Remote.It service mesh eBPF

What’s New With Cilium and What’s Next?

There's great potential for Cilium, the eBPF-based technology unlocking a new era of kernel-centric network engineering ...

Bill Doerrfeld | March 14, 2024 | Cilium, cloud-native networking, eBPF, linux, networking, open source

Grafana Labs observability

Grafana Labs Dives Deeper Into Kubernetes Observability

Grafana Labs extended its observability support for Kubernetes environments to simplify monitoring and troubleshooting and reduce costs ...

Mike Vizard | March 12, 2024 | application performance, distributed tracing, Grafana Labs, kubernetes, monitoring, observability

Cilium Rafay Systems OPA observability platform

Networking, Securing and Observing the Kubernetes Universe With Cilium and Hubble

The mysteries of your Kubernetes universe become a little less mysterious with Cilium and Hubble. Here's why ...

Timothy Mamo | February 28, 2024 | Cilium, cluster management, Hubble, kubernetes, observability

OpenTelemetry observability adoption Dynatrace Dives Deeper into Kubernetes

Boosting Business Performance With OpenTelemetry: A Comprehensive Overview

OpenTelemetry can improve your user experience and also enhance the overall efficiency of your business's operations ...

Reese Lee | February 22, 2024 | cloud native, microservices, New Relic, observability, telemetry

Traefik Tigera container security Calico Red Hat Dynatrace

Traefik Labs Extends Cloud-Native Reach of API Gateway

Traefik Labs updated its API gateway to add support for WebAssembly (Wasm), OpenTelemetry and the Kubernetes Gateway API ...

Mike Vizard | February 14, 2024 | API, gateway, kubernetes, OpenTelemetry, Traefik, Wasm, WebAssembly

platform engineering Kubernetes continuous testing

2024 Will See Increased Kubernetes Interoperability Challenges

A survey found 75% of stakeholders are either regularly or occasionally encountering interoperability issues with Kubernetes in production ...

Mike Vizard | January 12, 2024 | enterprise, interoperability, kubernetes, production, SpectroCloud

OpenTelemetry Argo NeuVector Extends Red Hat OpenShift Availability

OpenTelemetry for Containerized Environments

By providing a unified approach to telemetry data capture, OpenTelemetry aims to make observability more accessible to all developers ...

Gilad David Mayaan | January 11, 2024 | data, logs, metrics, monitoring, observability, OpenTelemetry, traces

1
2
3
4
›

Techstrong TV

Click full-screen to enable volume control

Watch latest episodes and shows

Edge Field Day

UPCOMING WEBINARS

CloudNativeNow.com
DevOps.com
SecurityBoulevard.com

Unlocking Your Core Business Potential With Kubernetes, Without It Being a Distraction

15 October 2024

Unlocking Your Core Business Potential With Kubernetes, Without It Being a Distraction

Leading Software Development in Microservices and Containers Era: Embracing Microservices and Containers

10 October 2024

Leading Software Development in Microservices and Containers Era: Embracing Microservices and Containers

Dynatrace and the Power of Possible

2 October 2024

Dynatrace and the Power of Possible

Terraform (Infrastructure as Code) and Why It Needs Better Management

10 October 2024

Terraform (Infrastructure as Code) and Why It Needs Better Management

Leading Software Development in Microservices and Containers Era: Embracing Microservices and Containers

10 October 2024

Leading Software Development in Microservices and Containers Era: Embracing Microservices and Containers

The API Gateway Advantage: Streamlining Security, Performance, and Scalability

8 October 2024

The API Gateway Advantage: Streamlining Security, Performance, and Scalability

Accelerate FedRAMP Compliance on Amazon EKS with Anchore

29 October 2024

Accelerate FedRAMP Compliance on Amazon EKS with Anchore

The Last Great Cloud Transformation:Securing Your Hybrid Workforce

17 October 2024

The Last Great Cloud Transformation:Securing Your Hybrid Workforce

AppSec for the Win: Proven Best Practices that Work

9 October 2024

AppSec for the Win: Proven Best Practices that Work

Podcast

Listen to all of our podcasts

Press Releases

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Deloitte Partners with Memcyco to Combat ATO and Other Online Attacks with Real-Time Digital Impersonation Protection Solutions

Deloitte Partners with Memcyco to Combat ATO and Other Online Attacks with Real-Time Digital Impersonation Protection Solutions

SUBSCRIBE TO CNN NEWSLETTER

MOST READ

JFrog Extends Reach Into Realm of NVIDIA AI Microservices

September 10, 2024

Red Hat Enables OpenStack to Run Natively on OpenShift Platform

August 27, 2024

Bouyant Extends Reach and Scope of Linkerd Service Mesh

August 20, 2024

Broadcom Tanzu Strategy Revolves Around Platform Engineering

August 30, 2024

Broadcom Revamps Tanzu to Simplify Cloud-Native App Development and Deployment

August 27, 2024

RECENT POSTS

Cloud-Native Storage Containers DevSecOps Features News Social - Facebook Social - LinkedIn Social - X Topics

Tigera Adds Vulnerability Management Capabilities to Calico Platform

September 18, 2024 Mike Vizard 0

Features Kubernetes News Social - Facebook Social - LinkedIn Social - X

Komodor Adds Generative AI Tool to Simplify Kubernetes Management

September 18, 2024 Mike Vizard 0

Cloud-Native Architecture Kubernetes Social - Facebook Social - LinkedIn Social - X

Kubernetes in Multi-Cloud Environments

September 17, 2024 Mariusz Michalowski 0

Cloud-Native Development Docker Features News Social - Facebook Social - LinkedIn Social - X

Docker Inc. Hikes Subscription Pricing in Return for Providing Increased Tool Access

September 12, 2024 Mike Vizard 0

Cloud-Native Security Social - Facebook Social - LinkedIn Social - X

Mitigating DDoS Attacks in Cloud-Native Applications

September 12, 2024 Devin Partida 0

About
Media Kit
Sponsor Info
Write for Cloud Native Now
Copyright
TOS
Privacy Policy

Powered by Techstrong Group

Copyright © 2024 Techstrong Group, Inc. All rights reserved.

Application Security Check Up

Step 1 of 7

14%

Does someone in your organization write software?(Required)

Yes

No

What portion of your cyber risk is Application Security (AppSec)? (Select one)(Required)

We over-focus on AppSec

We focus on AppSec to match the risk

We under-focus on AppSec

What are the biggest challenges you face implementing a robust AppSec strategy? (Select all that apply)

Lack of budget

Insufficient skilled personnel

Complexity of integrating security into the development lifecycle

Resistance from development teams

Keeping up with evolving security threats

Lack of executive buy-in

Other (please specify)

Other

Which DevSecOps practices are widely used for actively developed projects (not legacy) (Select all that apply):(Required)

Automated unit and functional tests for quality run in the pipeline with merge blocking

Automated application security testing (AST) in development and (SAST/IAST) runs in the pipeline

Automated AST tools to find vulnerabilities in the code you import (SCA) run in the pipeline

Merge blocking at current policy level for AST checks

Secrets management so no secrets stored in source code repositories

How do you assess and mitigate risk of For NON actively developed products (legacy) (Select all that apply):

In-production scans using DAST products like Qualys, Nessus, etc.

Periodic penetration testing

Periodic running of AST tools

Manual code reviews by security specialists

Use of third-party security assessment services

No assessment or mitigation effort is happening

How do you resolve the security issues found? (Select all that apply):(Required)

Findings are manually triaged

Findings are communicated to engineering via mostly manual processes

Finding above a certain severity automatically populate engineering backlogs

Service level agreements (SLAs) are enforced based on severity

An exception process exists to allow the business to accept risk

The exception process is rarely used and must be renewed periodically

Which best describes security training for your developers? (Select all that apply)(Required)

Monthly

Quarterly

Annually

As part of onboarding

Just-in-time via integration with AST tools when a vulnerability is found

No formal training provided

Δ