Migrating From PodSecurityPolicy - Challenges and Alternatives
Explore the migration from PodSecurityPolicy to Pod Security admission controller in Kubernetes v1.25. Learn challenges, alternatives, and strategies for a safe and confident cluster upgrade.
Flawed ML Security: Mitigating Security Vulnerabilities in Data and Machine Learning Infrastructure with MLSecOps
Explore security vulnerabilities in machine learning infrastructure and learn practical strategies for mitigating risks using MLSecOps. Gain insights on RBAC, encryption, and best practices for robust ML systems.
Policy-Based GitOps: How Policies Can Help Secure and Automate GitOps Workflows
Explore how Kubernetes-native policies enhance GitOps workflows, addressing automation and security gaps. Learn to leverage Kyverno with GitOps for improved management across clusters and multi-tenant services.
Introducing the OWASP Top Ten for Kubernetes
Explore OWASP's Top Ten Kubernetes risks, learn about common security issues, and discover strategies to enhance your containerized infrastructure's protection.
Network Policies - The Not-So-Hard Way
Practical workshop on implementing Cilium Network Policies in Kubernetes. Learn fundamentals, approaches, and tools for securing application traffic and creating effective network policies.
Pwning the CI with GitHub Action Workflows - Security Challenges and Exploits
Explore GitHub Actions vulnerabilities and CI security risks. Learn to identify and mitigate potential exploits in workflows and configurations to safeguard your development pipeline.
Who's Verifying Your Signatures? Approaching Private Container Image Signing
Explore container image signing for private use, comparing open-source and internal challenges. Learn about leading frameworks and their scalability for secure software delivery.
The Insider Threat: Third-Party Applications in Your Cluster
Explore vulnerabilities in third-party Kubernetes applications, their critical impact, and actionable steps to enhance cluster security. Learn from real-world examples and protect your infrastructure.
SIG Auth Deep Dive - Major Enhancements in Kubernetes Security
Explore major enhancements in Kubernetes authentication and authorization, including Pod Security, KMS encryption, and certificate signing request controls. Learn how to contribute to SIG Auth.
A 10-Step Guide for Integrating Security Metrics Into Your Observability Stack
Discover a 10-step approach to enhance your observability stack with security metrics, focusing on integrating Trivy with Prometheus for robust application monitoring and protection.
Guardians of the Runtime - Leveraging Behavioral Analysis and Policies for Kubernetes Security
Explore innovative Kubernetes security using behavioral analysis in CI testing and native policies. Learn hands-on practices for implementation and enforcement to protect against latest threats.
Malicious Compliance: Reflections on Trusting Container Scanners
Explore creative ways to bypass container image analysis and admission control detection, revealing limitations of validation tools and improving security policy creation.
Hardening Kubeflow Security for Enterprise Environments
Learn about Kubeflow security vulnerabilities, best practices, and improvements for enterprise environments. Gain insights on addressing unauthorized access, user impersonation, and data protection in MLOps platforms.
Designing and Securing a Multi-Tenant Runtime Environment at the New York Times
Explore the New York Times' journey in building multi-tenant Kubernetes clusters, focusing on networking choices, security considerations, and lessons learned from implementing Cilium for enhanced performance and visibility.
GitOps - The Magic Key to Cloud Native Security
Explore how GitOps enhances cloud native security, focusing on increased scan coverage using ArgoCD and Trivy. Learn the benefits of implementing GitOps across the development lifecycle.
Kubernetes Security Response Committee: Introduction and Deep Dive
Explore the Kubernetes Security Response Committee's role, vulnerability lifecycle, and key findings from the 2022 security audit. Learn about reporting processes and community impact.
Kubernetes Defensive Monitoring with Prometheus
Explore innovative uses of Prometheus for defensive monitoring in Kubernetes, complementing traditional security tools. Learn practical examples and ready-to-use strategies for enhancing your cluster's security posture.
Interactive Playground to Learn Kubernetes and Cloud Native Security
Explore Kubernetes security through hands-on scenarios in a vulnerable cluster environment. Learn about real-world vulnerabilities, CVEs, and security tools across infrastructure, supply chain, and runtime layers.
Prevent Embarrassing Cluster Takeovers - Detecting and Mitigating Configuration Risks
Discover how to secure Kubernetes clusters against common misconfigurations and vulnerabilities using Kubeaudit, an open-source scanner that detects and mitigates risks without hindering developer productivity.
Top 10 Istio Security Risks and Mitigation Strategies
Explore top Istio security risks and mitigation strategies for cloud native applications. Learn to prioritize efforts, protect against attacks, and address critical vulnerabilities in service mesh deployments.
Falco: Cloud-Native Runtime Security for Kubernetes - Recent Developments and Roadmap
Discover Falco: Cloud-Native Runtime Security for Kubernetes. Learn about recent developments, improved eBPF support, security enhancements, ecosystem integrations, and the project's roadmap from experienced contributors.