Leveraging OCI 1.1 for Enhanced SBOM Integration and Vulnerability Scanning in Harbor
Explore enhanced SBOM integration and vulnerability scanning in Harbor using OCI 1.1. Learn about auto-generation, auto-association, and streamlined scanning for improved container security management.
Kubernetes Security Blind Spot - Misconfigured System Pods
Explore Kubernetes security vulnerabilities in system pods, focusing on misconfigurations that can lead to unauthorized access and data breaches. Learn about real-world exploit chains and mitigation strategies.
Securing Java Containers by Breaking In
Explore container security through live hacking, learn vulnerabilities in Docker images, and adopt best practices for securing containerized Java applications in production.
Effective Detection in Kubernetes Clusters
Explore Kubernetes cluster security, event sources, and cloud interfaces to develop efficient detection strategies for protecting against rising attacks on production environments.
Effective Building Blocks for Securing Multi-Tenant Kubernetes Clusters
Explore Snapchat's journey in securing multi-tenant Kubernetes clusters, focusing on automated least privileged access and practical security trade-offs for container escape prevention.
Streamlining Falco Operations in Production with Falcoctl
Explore Falcoctl's capabilities for streamlining Falco operations in production environments, enhancing security and efficiency in cloud-native systems.
Securing Kubernetes Multi-Tenancy - Navigating Challenges Through DevSecOps
Explore security challenges in multi-tenant Kubernetes environments and learn strategies for enhancing control and visibility through DevSecOps practices, including namespace isolation, access controls, and incident response.
Is Your Image Really Distroless? - Securing Container Images
Explore techniques for creating secure "distroless" Docker images by separating build and runtime dependencies, reducing vulnerabilities, and using init containers for configuration without shells.
Keep Hackers Out of Your Cluster with These 5 Simple Tricks
Discover data-driven strategies to enhance Kubernetes cluster security, focusing on real-world attacks and high-impact vulnerabilities. Learn effective mechanisms to protect against malicious workloads and container escapes.
The Top 10 List of Istio Security Risks and Mitigation Strategies
Explore CNCF's Top 10 Istio security risks and learn effective mitigation strategies to protect cloud-native applications from threats, data breaches, and security incidents.
Securing 900 Kubernetes Clusters - Journey to ValidatingAdmissionPolicies
Explore Mercedes-Benz's journey in securing 900+ Kubernetes clusters, transitioning from Pod Security Policies to ValidatingAdmissionPolicies, and learn about challenges and advantages of native solutions.
VEXinating Container Images: The European Approach to Software Supply Chain Security
Explore VEX implementation for container image security, addressing European legislation and enhancing software supply chain resilience through machine-readable vulnerability management.
Secret Store CSI Driver Tutorial for Kubernetes and AWS Secrets Manager
Comprehensive guide to Secret Store CSI Driver for Kubernetes security. Learn its importance, comparison with alternatives, and setup process. Includes demos on AWS Secret Manager integration and practical implementation.
(Almost) Secure by Default - Next Steps for Hardening Istio in Production Environments
Explore advanced security measures for Istio in production, including mTLS, certificate management, and integration with network policies and cloud security services for a robust zero-trust architecture.
Security Showdown: The Overconfident Operator vs the Nefarious Ne'er-Do-Well
Playful demo showcasing cloud-native security concepts through characters Ozzie and Nova, exploring vulnerabilities and proactive measures for robust cluster protection.
Securing Filesystem Images for Unprivileged Containers
Explore techniques for securing filesystem images in unprivileged containers, including user namespaces, shiftfs, userns portable roots, and filesystem mappings. Learn pros and cons of each approach.
On the Way to Safe Containers - Security and Resource Management in LXC and LXD
Explore container security with LXC and LXD, focusing on user namespaces, AppArmor, seccomp, and resource limitations. Learn about safe system containers and potential vulnerabilities in VM-like environments.
Achieving FIPS 140-2 Validated Encryption for Windows Containers
Achieve FIPS 140-2 validated encryption for Windows containers using Mirantis Container Runtime. Learn about encryption importance, runtime options, FIPS 140-2 fundamentals, and integrating Windows containers with Kubernetes.
SELinux in the Containerized World - Kubernetes Security and Challenges
Explore SELinux's role in container and Kubernetes security, covering challenges, volume relabeling, and future integration prospects.
The Hacker's Guide to Kubernetes Security Risks and Vulnerabilities
Explore Kubernetes security risks, vulnerabilities, and best practices through live demos of OWASP Top 10 exploits, enhancing your cluster hardening skills.
What We've Learned from Scanning 10,000+ Kubernetes Clusters
Discover key insights from scanning 10,000+ Kubernetes clusters, exploring security vulnerabilities, misconfigurations, and best practices for robust cloud-native deployments.