The Cost of Secrets: Managing and Protecting Sensitive Information in Cloud Native Environments
Explore the risks of exposed secrets in cloud-native environments, learn prevention strategies, and discover best practices for secure credential management.
Mitigating Kubernetes Attacks
Explore Kubernetes attack vectors, mitigation strategies, and best practices for securing cloud-native deployments. Learn to protect your clusters using MITRE ATT&CK framework and Azure's extensions.
IMA Namespaces for Container Security Enhancement
Enhancing container security with IMA namespaces, integrating with Kubernetes and remote attestation for detecting file changes within containers.
Introducing Kubescape 3.0 - Cloud Native Security Scanner
Explore Kubescape 3.0's latest features and advancements in cloud native security. Learn how this tool enhances Kubernetes protection and streamlines security workflows for DevOps teams.
Fine-Grained Authorization with Topaz - Open Source Solutions
Explore Topaz: an innovative authorization engine uniting policy-as-code, relationship-based models, and real-time decision-making for enhanced security in zero-trust environments.
eBPF-based Kubernetes Security
Explore cutting-edge eBPF technology for enhancing Kubernetes security, offering advanced protection and monitoring capabilities for cloud-native environments.
Troubles and Tidbits from Datadog's eBPF Journey
Explore Datadog's eBPF journey, uncovering challenges, pitfalls, and lessons learned in observability, security, and networking. Gain insights into eBPF hook points, security bypasses, and networking complexities.
Attribute-Based Access Control Framework for IoT
Explore an open-source authorization framework for IoT, overcoming limitations of XACML and OAuth. Learn about app-specific policies using attributes for dynamic, location-specific roles in device provisioning.
Application Code of Conduct - Full-Stack Policy as Code
Explore full-stack policy as code implementation using open-source tools like Rego and Open Policy Agent. Learn to build comprehensive authorization solutions across backend, frontend, and business functions.
Nesting Secure VM Hosts - Exploring Benefits and Drawbacks
Explore nesting secure hosts in virtualization, examining benefits, drawbacks, and technical aspects of KVM using secure firmware APIs to emulate secure VM firmware for hosting secure VMs.
Extending Kubernetes with Storage Transformers
Explore storage transformers in Kubernetes, their architecture, and use cases. Learn to implement custom transformers for encrypting secrets at rest using KMS providers.
Gatekeeper - Flexible, Shareable Policy for Kubernetes
Explore flexible, shareable Kubernetes policies with Gatekeeper. Learn to implement, customize, and contribute rules for security, legal, and operational requirements across your software lifecycle.
Scaling Security Assessment for DevOps - Norad Framework Introduction
Learn to scale security assessments for DevOps with Norad, a distributed testing framework. Automate open-source and vendor tools, aggregate results, and develop custom security tests using the SDK.
Barbican - Protecting Secrets at Scale for Cloud Infrastructure
Explore Barbican, an open-source key management solution for secure, scalable infrastructure. Learn its architecture, usage as internal/cloud service, and see a proof-of-concept demo.
Deep Dive into Open Policy Agent, Conftest, and GateKeeper - Kubernetes Policy in Action
Explore Kubernetes policy enforcement using Open Policy Agent, Conftest, and GateKeeper. Learn implementation strategies and best practices for secure, compliant container orchestration.
Kubernetes Security: Using Open Source Tools to Secure Open-by-Default Systems
Explore open-source security tools and frameworks for Kubernetes, covering compliance, threat detection, and network segmentation to enhance your cluster's protection.
GitOps, Kubernetes, and Secret Management
Explore GitOps, Kubernetes, and secure secret management practices for modern cloud-native applications, focusing on external secret management and practical implementation strategies.
GitHub Actions: Vulnerabilities, Attacks, and Counter-Measures
Explore vulnerabilities, attacks, and countermeasures for GitHub Actions, enhancing your understanding of secure CI/CD practices and DevSecOps implementation.
What We've Learned From Scanning 10K+ Kubernetes Clusters
Insights from scanning over 10,000 Kubernetes clusters, revealing common security vulnerabilities and best practices for robust container orchestration.
Is Kubernetes the Next Fault Domain? - Challenges in Multi-Region Deployments
Explore challenges and solutions for Kubernetes in hybrid, multi-region deployments. Covers networking, security, performance, and more. Learn about next-generation problems and strategies for robust, scalable applications.
Security Risks in Third-Party GitHub Actions - Overlooked Consequences
Explore security risks in GitHub Actions, including build permission issues and "unpinnable actions." Learn about potential consequences and challenges in protecting against compromised third-party actions.