container security
How Container Image Signing Works From Build to Kubernetes Deployment
Container image signing helps DevOps teams verify artifact identity and integrity before deployment, strengthening software supply chain security with signatures, provenance and Kubernetes admission controls ...
Michael Carter | | Artifact Integrity, attestations, CI/CD security, container image signing, container registry, container security, cryptographic signing, deployment policy, DevSecOps, ephemeral runners, image digest, image provenance, keyless signing, Kubernetes admission, Kubernetes security, SBOM, software provenance, software supply chain, supply chain security, trusted delivery
Production-Safe Security Testing: A Missing Layer in Cloud-Native Application Security
Cloud-native applications keep changing after deployment, making production-safe security testing essential for validating real vulnerabilities, misconfigurations and access-control gaps without disrupting live systems ...
Dharmesh Acharya | | API security, application security, attack surface management, business logic flaws, CI/CD security, cloud native security, cloud security, container security, continuous security testing, DevSecOps, IAM security, microservices security, misconfiguration, non-destructive testing, penetration testing, production security testing, production validation, runtime security, security posture, vulnerability validation
Containers Became the Unit of Speed. AI Agents Are Making VMs the Unit of Trust
The container is not disappearing. But as autonomous agents generate code, install packages and invoke tools, cloud-native infrastructure is placing a VM-grade security boundary around it ...
Alan Shimel | | Agent Sandboxing, agent security, agentic AI, AI agents, AI infrastructure, autonomous agents, cloud native security, container security, containers, Docker Sandboxes, Firecracker, gVisor, Kata Containers, kubernetes, MCP security, MicroVMs, platform engineering, RuntimeClass, secure execution, virtualization, workload isolation, zero-trust
Docker Hub vs. Private Registries: Security Tradeoffs
In the race to accelerate software delivery, Docker Hub has become a default starting point for developers and organizations alike. It offers convenience, accessibility, and a vast ecosystem of pre-built images that ...
How Base Images Impact Software Supply Chain Security in Kubernetes
As organizations scale their Kubernetes environments, the software supply chain becomes increasingly complex, interconnected, and vulnerable. One of the most overlooked yet foundational components of this supply chain is the base image ...
Container Runtime Security in Kubernetes: What Teams Overlook
Kubernetes security conversations tend to center on the things that happen on the left-hand side of the process. Scanning images, hardening Dockerfiles, and working with registry access controls all tend to frontload ...
Hardening the Core: Container Validation and Malicious Package Defense
Docker images are becoming a major software supply chain risk. Learn why scanning alone is not enough and how layered security can protect containers from build to runtime ...
Sean Roth | | CI/CD security, cloud native security, container image vulnerabilities, container isolation, container registries, container runtime security, container security, container vulnerability scanning, dependency security, DevSecOps, Docker hardening, Docker image security, image lifecycle security, image validation, malicious container images, malicious packages, minimal base images, non-root containers, runtime protection, SBOM, secure build practices, secure Docker images, software supply chain security, zero-day threats
Most Container Images You Pull Today Are Already Full of Vulnerabilities
Container image security has quietly stayed stuck on the same problem it had a decade ago. Finding vulnerabilities is trivial — every major scanner returns pages of them from the average image ...
Tigera Introduces Lynx, a Unified Control Plane for Kubernetes‑Native AI Agents
The first Kubernetes AI agent control plane is here. Tigera, best known for backing the open-source Calico networking and security stack for Kubernetes, is pushing beyond traditional container security with the launch ...
Komodor Brings Autonomous AI to SRE With Reliability-First Cloud Optimization
SRE teams are under constant pressure to balance reliability, performance, and cloud costs. Komodor is tackling the challenge with new AI-powered Capacity Intelligence and Predictive Placement capabilities designed to proactively eliminate infrastructure ...

