
Explore OWASP's Top Ten Kubernetes risks, learn about common security issues, and discover strategies to enhance your containerized infrastructure's protection.

Explore GitHub Actions vulnerabilities and CI security risks. Learn to identify and mitigate potential exploits in workflows and configurations to safeguard your development pipeline.

Explore container security vulnerabilities and learn how Falco can detect and respond to container escape techniques based on Linux capabilities, with real-world CVE examples.

Explore policy-based governance for end-to-end integrity control in Open Cluster Management, focusing on manifest signing, secure secret delivery, and admission control for enhanced Kubernetes security.

Explore container image signing for private use, comparing open-source and internal challenges. Learn about leading frameworks and their scalability for secure software delivery.

Explore InfluxData's journey in implementing container image signing for their SaaS offering, covering the process, challenges, and technical details from DevOps and security perspectives.

Explore quantum-resistant cryptography for cloud-native stacks, focusing on Envoy and Istio implementations to address potential threats from quantum computing advancements.

Explore vulnerabilities in third-party Kubernetes applications, their critical impact, and actionable steps to enhance cluster security. Learn from real-world examples and protect your infrastructure.

Automating cloud native app development with integrated security testing, from building and scanning to packaging and deployment, all within a single pull request for consistency and efficiency.

Explore secure multicluster Istio configuration using GitOps patterns. Learn to manage production Istio deployments, enforce security policies, and enable developer self-service with Argo CD and Argo Rollouts.

Explore the evolution of vulnerabilities in popular container images, understand security challenges, and learn practical steps to manage and prevent issues in your development process.

Explore securing Infrastructure as Code supply chains, applying software security principles to IaC pipelines. Learn about Crossplane's integration with Sigstore for enhanced provenance and attestations.

Explore Datadog's innovative approach to image signing and runtime verification, addressing software supply chain security challenges in complex, large-scale environments.

Learn to enhance Kubernetes security using Gatekeeper and Ratify for supply chain policy enforcement. Explore admission controllers, CRD-based policies, and external data verification for robust cluster protection.

Explore Ingress-Nginx's release cycle, security measures, and ongoing improvements. Learn about efforts to enhance release processes, reduce complexity, and maintain CVE-free status in this critical Kubernetes component.

Learn how The New York Times automates configuration and permissions testing for GitOps using OPA Conftest, enabling secure self-service deployments while maintaining developer autonomy.

Discover how eBPF can detect and prevent critical vulnerabilities like Log4jshell in Kubernetes environments, providing enhanced security and real-time protection for your systems.

Explore creative ways to bypass container image analysis and admission control detection, revealing limitations of validation tools and improving security policy creation.

Live demonstration of Kubernetes cluster attacks and defenses, exploring vulnerabilities, mitigation strategies, and practical security techniques for effective threat modeling and protection.

Explore Notary v2's advanced capabilities for securing software supply chains, including core functionalities, enterprise scenarios, and ecosystem integrations.

Learn about Kubeflow security vulnerabilities, best practices, and improvements for enterprise environments. Gain insights on addressing unauthorized access, user impersonation, and data protection in MLOps platforms.