Kubernetes security
How Distroless Containers Defend Against npm Malware Attacks
The npm breach shows why distroless containers matter. Learn how minimal, continuously rebuilt images strengthen cloud-native supply-chain security ...
Dhanush V M | | CleanStart, cloud native security, container hardening, container security, DevSecOps, distroless best practices, distroless containers, KubeCon 2025, Kubernetes security, malware prevention, minimal container images, npm attack, open source security, phishing attack, SBOM, secure build pipelines, secure software delivery, SLSA compliance, software supply chain security, vulnerability remediation
Why Traditional Kubernetes Security Falls Short for AI Workloads
AI workloads on Kubernetes bring new security risks. Learn five principles—zero trust, observability, and policy-as-code—to protect distributed AI pipelines ...
Ratan Tipirneni | | AI infrastructure, AI security, AI Workloads, cloud native AI, cloud native security, container security, data protection, DevSecOps, edge AI, GPU workloads, KubeCon 2025, kubernetes, Kubernetes observability, Kubernetes security, microsegmentation, multi-cluster security, policy as code, runtime protection, Spectro Cloud report, zero-trust
LLMs & Kubernetes Configuration: Automating Hardening, Drift Detection and Policy Enforcement
Kubernetes misconfigurations remain the top security risk. AI copilots promise automated hardening, drift detection, and policy enforcement to make clusters safer ...
Alan Shimel | | admission controllers, AI copilots, AI in Kubernetes, cloud native security, cncf, drift detection, GitOps, KubeGuard, kubernetes, Kubernetes governance, kubernetes hardening, Kubernetes misconfiguration, Kubernetes security, Kyverno, large language models, LLMs, OPA, OpenTelemetry, platform engineering, RBAC, YAML Jenga
Runtime Visibility: The Missing Layer in Cloud-Native Security
Cloud-native security can’t rely on old perimeter defenses. With workloads spinning up in seconds, runtime visibility is now the missing layer leaders must prioritize. Learn why observability is security, how tools like ...
Shimmy’s Early Look: Can’t-Miss Sessions at KubeCon + CloudNativeCon North America 2025
CNCF turns 10 as KubeCon + CloudNativeCon North America 2025 heads to Atlanta this November. With 300+ sessions on Kubernetes, AI, platform engineering, security, and observability, the event showcases the next decade ...
Alan Shimel | | AI workloads on Kubernetes, cloud native AI, cloud native events, CloudNativeCon 2025, CNCF community, DevOps conferences 2025, KubeCon 2025, KubeCon keynotes, Kubernetes conference Atlanta, Kubernetes security, multi-cluster orchestration, observability Kubernetes, platform engineering, supply chain security
Shauli Rozen on Kubescape Achieving CNCF Incubation
ARMO CEO Shauli Rozen explains why Kubescape, an open source agent for collecting security telemetry data in Kubernetes environments, has become an incubation level project within the Cloud Native Computing Foundation (CNCF) ...
Hardening Kubernetes Security with DevSecOps Practices
As organizations embrace the speed of Kubernetes, they often find their existing security practices lagging, creating a dangerous gap between development velocity and security posture ...
Enhancing Kubernetes Security in Your Software Supply Chains With TLS certificates
Utilizing TLS certificates properly in your software supply chains can help decrease the chances of a cybersecurity incident, such as a supply chain attack or a man-in-the-middle attack ...
Kickstart Your Kubernetes Security
Security is a challenging aspect of Kubernetes management, but leveraging the knowledge and tools from the community can significantly help ...
Quick Wins for Containers Images Security
How do you know your container security program is effective? Can you balance large-scale operational needs with the granularity required to allow specific engineers to remove critical security risks? Can containers’ runtime ...

