Securing CI/CD Pipelines Through Security Gates
Explore strategies for enhancing CI/CD pipeline security through Security Gates, focusing on cloud-native ecosystems, DevOps practices, and tools like Cubescape.
Falco to Pluginfinity and Beyond - Cloud-Native Runtime Security
Explore Falco's evolution as a cloud-native runtime security project, including its new plugin system for enhanced cloud security and threat detection in Kubernetes environments.
How Attackers Use Exposed Prometheus Servers to Exploit Kubernetes Clusters
Explore how attackers exploit exposed Prometheus servers to gather sensitive information for fingerprinting Kubernetes clusters, and learn strategies to secure your infrastructure against these threats.
Secure by Default with GitOps - A Guide to OPA with Argo CD
Learn to integrate Argo CD and Open Policy Agent for secure GitOps practices, enhancing software delivery supply chain security through admission hooks, sync waves, and other strategies.
Rocking Kubernetes Security - Safeguarding Hundreds of Clusters in a Multi-Cloud Environment
Explore strategies for securing hundreds of Kubernetes clusters in a dynamic multi-cloud environment using automation tools, addressing emerging threats and on-demand provisioning challenges.
The Attacker Perspective - Insights From Hacking Alibaba Cloud's Managed Kubernetes Environments
Explore real-world hacking of managed Kubernetes environments, from initial access to unauthorized database access. Learn to strengthen deployments and enhance security posture through this step-by-step case study.
Hacking from Cloud to Endpoint and Vice Versa
Map attack paths in Entra/Azure AD and on-premise AD using BloodHound. Explore hybrid attack scenarios and learn defensive strategies for securing cloud and endpoint environments.
Infrastructure as Code Security Best Practices and Strategies
Explore Infrastructure as Code security best practices, including resource tagging, avoiding insecure defaults, secret management, version control, and pipeline security for robust cloud deployments.
Say Goodbye to Manual Kubernetes User Access Onboarding
Automate Kubernetes user access onboarding for enhanced security and efficiency in DevOps environments.
Anonymize Application Logs in DevOps Way
Learn techniques for anonymizing application logs in DevOps, focusing on structured logging and Google Cloud implementation for enhanced security and compliance.
Runtime Kubernetes Security: Threat Detection with Falcosidekick
Explore runtime Kubernetes security and threat detection using Falcosidekick. Learn practical scenarios, UI demonstrations, and testing techniques for enhanced cluster protection.
On the Practicality of Cryptographically Enforcing Dynamic Access Control Policies in the Cloud
Explores the practical challenges of implementing cryptographic access control for cloud data, highlighting computational costs and bottlenecks in dynamic scenarios.
How to Use Mirantis Container Runtime to Secure Business-Critical Applications
Explore Mirantis Container Runtime's enterprise features for securing mission-critical applications. Learn about cryptographic modules, CI/CD integration, and vulnerability scanning to build a robust software supply chain.
Hands-on Introduction to Kubescape - Kubernetes Security Scanning Tool
Explore Kubescape, an open-source tool for Kubernetes security and risk analysis. Learn about its features, integration capabilities, and practical applications in multi-cloud environments.
Securing Managed Kubernetes Clusters
Explore Kubernetes security for managed cloud clusters, understanding threat models and gaining actionable recommendations for secure workload deployment in this comprehensive overview.
Kubernetes Ingress-Nginx Security from Beginner to Expert - 2019
Learn to secure Kubernetes applications using Nginx-Ingress Controller, covering various configuration techniques to protect against vulnerabilities and enhance overall cloud security.
Databricks Lakehouse Platform - Governance and Security Fundamentals
Learn fundamentals of governance and security for cloud data platforms, covering identity management, private links, access monitoring, cost control, and policy enforcement for workspaces.
How to Configure Proxmox VE Firewall
Learn to configure Proxmox VE's built-in firewall for enhanced security. Covers rule creation, management levels, aliases, IP sets, security groups, and troubleshooting techniques.
Threat Modeling Kubernetes - A Lightspeed Introduction
Discover threat modeling for Kubernetes: Learn to identify risks, understand adversarial techniques, and implement preventive measures to enhance cloud-native system security and delivery velocity.
How CNET Uses CNCF Tools for High-Traffic, Dynamic, and Scalable Websites
Explore how CNET leverages CNCF tools like Kubernetes, Prometheus, and Cert-Manager to create a robust, scalable platform for high-traffic websites, enabling rapid development and deployment.
Hands-on Workshop: Batten Down the Hatches - A Cluster Security Journey
Hands-on workshop guiding security engineers through a Kubernetes cluster security audit. Learn inventory, assessment, least privilege enforcement, and compliance in a real-world environment.