Top Secret Cloud Native Security Lessons
Explore cloud-native security essentials for Kubernetes, Docker, and Istio. Learn real-world lessons, audit findings, and best practices to identify and mitigate potential vulnerabilities in your infrastructure.
Integrating Cloud Native Security into the SRE Culture
Explore integrating cloud native security into SRE culture, enhancing DevOps practices with robust security measures for modern infrastructure and applications.
Insecure Execution: Attacking the Cloud Native Supply Chain
Explore cloud native supply chain vulnerabilities and learn strategies to enhance security against internal threats and software implants.
Kubernetes CKS Certification Guide 2023 - Exam Preparation and Falco Demo
Explore Kubernetes CKS certification essentials, including exam tips, cloud-native concepts, and Falco security tool. Gain insights and practical knowledge to become a certified Kubernetes security specialist.
Enhancing Cyber Resilience Through Zero Trust Chaos Experiments in Cloud Native Environments
Explore Zero Trust Chaos Experiments to uncover vulnerabilities and enhance cyber resilience in cloud-native environments. Learn strategies to detect and mitigate cyber threats through simulated disruptions.
Safeguarding Cloud Native Supply Chain - Notary Project Overview and New Features
Explore how Notary Project enhances cloud native supply chains through authentic container images and OCI artifacts. Learn about new features, roadmap, and upcoming developments in software supply chain security.
The Runtime Rodeo - Taming Open Source Image Behavior
Explore a new standard for creating behavioral fingerprints of open source images at runtime, enhancing cloud native security beyond traditional software supply chain measures.
Bridging Mesh Enclaves - Securing and Maintaining Mesh Heterogeneity
Explore secure workload connections across service mesh technologies using SPIFFE and SPIRE. Learn to maintain technical heterogeneity while implementing universal workload security in complex software architectures.
Shift Down Security - How Platform Teams Can Help Break the Logjam
Explore how platform engineering and cloud native practices can automate security using policy as code, enabling developers and security teams to focus on their core competencies.
The Story of Crush - Navigating the Cloud Native Ocean with SPIFFE Identity
Explore how a microservice named Crush overcame security challenges using SPIFFE ID, enabling secure communication and access across cloud platforms through mTLS and standardized identity management.
Below the Radar: Identifying Hidden Threats Within the Development Ecosystem
Explore critical threats in cloud-native environments, focusing on hidden exposed secrets in code. Learn about vulnerabilities in source code management, Kubernetes secrets, and Shadow IT, with mitigation strategies and tools.
Secure by Design: Strategies for LLM Adoption in Cloud-Native Environments
Explore strategies for secure LLM adoption in cloud-native environments, addressing data privacy, AI-agent architectures, and security hardening. Learn practical approaches and insights from real-world implementations.
Toward Zero Trust with AI
Explore how K8sGPT, an AI-powered tool, simplifies Zero Trust implementation in cloud-native environments by integrating with system events and enhancing policy enforcement and network security.
Sailing the Security Seas with Tetragon Tutorial
Explore Tetragon for runtime security: learn to filter and examine events, strengthen defenses against intrusions, and gain hands-on experience using the tetra CLI in this interactive tutorial.
AuthZEN: The OpenID Connect for Authorization - A New Standard for Cloud-Native Authorization
Discover how AuthZEN is revolutionizing cloud-native authorization standards through unified APIs, exploring both policy-as-code and policy-as-data approaches while ensuring vendor independence and interoperability.
From Observability to Enforcement: Lessons Learned Implementing eBPF Runtime Security
Dive into eBPF runtime security implementation, exploring the transition from observability to enforcement. Learn kernel-level security event collection, attack prevention strategies, and practical insights from the Tetragon team.
Comparing Kubernetes Security Agents: Falco, Tetragon and KubeArmor
Explore a detailed comparison of three leading eBPF-based Kubernetes security solutions, examining performance impacts, required privileges, and key features to make an informed choice for cluster protection.
Stop Kubernetes' Revolving Door: A Hands-on Tutorial to Secure a Kubernetes Cluster
Master essential security practices for Kubernetes clusters through hands-on exercises covering authentication, authorization, network policies, and pod security to protect against potential threats.
Stop Kubernetes' Revolving Door: A Hands-on Tutorial to Secure a Kubernetes Cluster
Master essential Kubernetes security practices through hands-on exercises covering authentication, authorization, network policies, and pod security to effectively protect and fortify your clusters.
Open Source Security Is Not a Spectator Sport
Discover how CNCF leads open source security innovation through TAG Security initiatives, supply chain recommendations, and community-driven solutions for cloud-native environments.
Breaking Free from Vulnerability Scanning Noise - Automated VEX Aggregation for Accuracy
Discover how to improve vulnerability scanning accuracy through VEX Hub, an automated aggregation system that reduces false positives and streamlines security workflows in cloud-native environments.