Detection Engineering in Kubernetes Environments - Wrangling Security Data Out of Your Clusters
Explore Kubernetes security: log types, detection strategies, and real-world scenarios. Learn to identify malicious activities and risky configurations in both self-managed and CSP-managed clusters.
Avengers Assemble: Threat Modeling Kubernetes Clusters at Massive Scale
Explore threat modeling for Kubernetes clusters at scale, identifying potential security risks and countermeasures in microservices architectures to enhance protection against unauthorized access and resource misuse.
Securing the Kubernetes Empire with OpenPolicyAgent and Rego
Explore OpenPolicyAgent and Rego for robust Kubernetes security. Learn to create, implement, and manage policies efficiently, ensuring compliance and fortifying your cloud-native infrastructure.
Unlocking the Secrets to Effective Secrets Management in GitOps
Explore strategies for secure secrets management in GitOps workflows, covering encryption, access controls, and automated rotation to enhance development pipeline security.
Modernizing Image Security in CI/CD with Cosign and OPA
Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.
Using Declarative Intent with Cert Manager for Just-in-Time AWS Access in Kubernetes Workloads
Explore declarative intent and cert manager for on-demand AWS access in Kubernetes, enhancing security and efficiency for cloud-native workloads.
Policy as Code: A Game-Changer for Stack Security
Explore "Policy as Code" and its impact on stack security. Learn about access control models, policy engines, and how to integrate authorization into your codebase for enhanced application security.
Next-Level Security: Implementing MTLS in Istio Multi-Cluster Environments Using SPIRE
Explore implementing mutual TLS in Istio multi-cluster environments using SPIRE. Learn about security challenges, mTLS, Istio's features, and SPIRE integration for enhanced microservices security.
Living off the Land Techniques in Managed Kubernetes Clusters
Explore advanced techniques for exploiting managed Kubernetes clusters, including privilege escalation, lateral movement, and security control bypasses using cluster middleware and components.
Kubernetes Security Blind Spot - Misconfigured System Pods
Explore Kubernetes security vulnerabilities in system pods, focusing on misconfigurations that can lead to unauthorized access and data breaches. Learn about real-world exploit chains and mitigation strategies.
OIDC and CI/CD: Reducing Security Threats in Your CI Pipeline
Explore CI/CD security risks and learn strategies to reduce attack surfaces using OIDC, proper branch permissions, and credential management for enhanced supply chain protection.
Key Management 101 - DEKs, KEKs, and Credentials Living Together
Explore key management essentials, including types of keys, usage, and tools. Learn practical advice for PCI compliance and securing sensitive data in cloud environments.
Effective Detection in Kubernetes Clusters
Explore Kubernetes cluster security, event sources, and cloud interfaces to develop efficient detection strategies for protecting against rising attacks on production environments.
Securing Azure OpenAI Apps in the Enterprise
Explore core security controls for Azure OpenAI in enterprises. Learn available measures, identify gaps, assess effectiveness, and implement robust protection strategies.
Long Live Short Lived Credentials - Auto-rotating Secrets at Scale
Explore auto-rotating secrets management for enhanced security. Learn practical strategies to implement and scale this crucial practice in your systems.
A Case Study for Improving Network Isolation in a Multitenant Kubernetes Cluster
Explore network isolation strategies for multitenant Kubernetes clusters, focusing on secure traffic separation between tenants and infrastructure using multiple network interfaces and IP addresses.
Memory Armor for SPIRE - Fortifying with Confidential Containers
Explore enhancing SPIRE security with Confidential Containers, protecting sensitive data in memory from potential attacks and adding an extra layer of defense to your cloud-native infrastructure.
Running PCI-DSS Certified Kubernetes Workloads in the Public Cloud
Discover strategies for running PCI-DSS certified Kubernetes workloads in AWS. Learn about GitOps, network policies, image scanning, policy as code, and runtime security using open-source tools like ArgoCD, Cilium, and OPA Gatekeeper.
Securing 900 Kubernetes Clusters - Journey to ValidatingAdmissionPolicies
Explore Mercedes-Benz's journey in securing 900+ Kubernetes clusters, transitioning from Pod Security Policies to ValidatingAdmissionPolicies, and learn about challenges and advantages of native solutions.
Misconfigurations in Helm Charts - Automated Detection and Mitigation Progress
Explore automated detection and mitigation of Helm Chart misconfigurations. Evaluate tools, discuss common issues, and learn about potential solutions for improving cloud configuration security.
Kubernetes Data Protection Working Group Deep Dive
Explore the current state and future of data protection in Kubernetes, including missing functionalities and collaborative efforts to enhance support across multiple SIGs.