From Risks to Resilience: Leveraging CNCF Projects Against Kubernetes' OWASP Top 10
Explore strategies to mitigate OWASP Kubernetes Top Ten security risks using CNCF projects. Learn actionable insights to enhance the security of your Kubernetes deployments.
Security-Focused Chaos Engineering - The Lasso for AI Security Threats
Explore proactive AI security testing using Secops-Chaos, an open-source framework for encoding threat tactics as chaos experiments in Kubernetes environments.
Threat Modelling: How to Improve Your Kubernetes Security Posture
Learn to enhance Kubernetes security through innovative threat modeling techniques, focusing on identifying risks in complex environments and improving overall security posture for development and SRE teams.
Thinking Like a Threat Actor in Kubernetes Environments
Explore threat actor mindsets to enhance Kubernetes security. Learn proactive defense strategies and vulnerability assessment techniques for robust cloud-native environments.
Securing the Kubernetes Empire with OpenPolicyAgent and Rego
Explore OpenPolicyAgent and Rego for robust Kubernetes security. Learn to create, implement, and manage policies efficiently, ensuring compliance and fortifying your cloud-native infrastructure.
Modernizing Image Security in CI/CD with Cosign and OPA
Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.
Securing the Secrets Manager with KubeArmor
Explore securing secrets management in cloud-native environments using KubeArmor. Learn advanced techniques for protecting sensitive information and enhancing overall system security.
Kubernetes Privilege Escalation Tactics - Understanding and Mitigating Vulnerabilities
Explore Kubernetes vulnerabilities, privilege escalation tactics, and mitigation strategies. Learn to secure clusters against insider threats and external attacks through hands-on demonstrations and best practices.
MultiJuicer - Open-Source Tooling for Web Application Security Trainings on Kubernetes
Explore MultiJuicer, an open-source tool for conducting web application security trainings on Kubernetes. Learn how to enhance your cybersecurity skills and implement effective training programs.
KubeArmor: Cloud-Native Runtime Security Enforcement
Explore KubeArmor: a runtime security system for cloud-native environments. Learn how it restricts pod, container, and node behavior using Linux security modules and generates rich alerts with eBPF.
Enforcing Network Policies for Host Processes via eBPF
Innovative approach using eBPF to identify and secure network traffic from host processes and pods using host network, enhancing Kubernetes network security beyond traditional methods.
Kubernetes Security Blind Spot - Misconfigured System Pods
Explore Kubernetes security vulnerabilities in system pods, focusing on misconfigurations that can lead to unauthorized access and data breaches. Learn about real-world exploit chains and mitigation strategies.
Streamlining Falco Operations in Production with Falcoctl
Explore Falcoctl's capabilities for streamlining Falco operations in production environments, enhancing security and efficiency in cloud-native systems.
Kubernetes Policy Time Machine - Navigating Policy Options and Future Directions
Explore Kubernetes policy options, from built-in resources to ValidatingAdmissionPolicies and OSS projects. Learn pros and cons to secure clusters, optimize resources, and simplify management. Discover Policy WG activities and opportunities.
Keep Hackers Out of Your Cluster with These 5 Simple Tricks
Discover data-driven strategies to enhance Kubernetes cluster security, focusing on real-world attacks and high-impact vulnerabilities. Learn effective mechanisms to protect against malicious workloads and container escapes.
The Top 10 List of Istio Security Risks and Mitigation Strategies
Explore CNCF's Top 10 Istio security risks and learn effective mitigation strategies to protect cloud-native applications from threats, data breaches, and security incidents.
Safety or Usability: Why Not Both? Towards Referential Auth in Kubernetes
Explore new Kubernetes APIs for secure cross-namespace references and authorization, addressing CVEs in essential tooling while enabling innovative reference patterns.
Security Showdown: The Overconfident Operator vs the Nefarious Ne'er-Do-Well
Playful demo showcasing cloud-native security concepts through characters Ozzie and Nova, exploring vulnerabilities and proactive measures for robust cluster protection.
Enhanced Security for Multi-Tenant Architectures: Key Components and Best Practices
Explore Zero-Trust architecture for securing multi-tenant Kubernetes clusters. Learn best practices, access control, network isolation, and runtime security to fortify against threats and breaches.
Identity, Istio, and Zero-Trust Environments - Choosing the Right Solution
Explore Istio's identity solutions for zero-trust environments, comparing certificate authority configurations and integrations to help you choose the best option for your specific business needs.
Cloud-Native Security Simplified: Automating OpenShift VM Compliance with Knative, Tekton and Ansible
Automate OpenShift VM compliance using Knative and Tekton. Streamline post-provisioning tasks, enhance efficiency, and minimize errors in cloud-native environments.