Leveraging Gateway API for Kubernetes Native API Management
Explore advanced Kubernetes networking with Gateway API, learning to optimize routing, security, and API management for scalable microservices architectures and service mesh integration.
Safely Extending the Kubernetes Scheduler with WebAssembly - A Tale of Two Plugins
Discover how WebAssembly enhances Kubernetes scheduler extensibility, exploring implementation challenges, architectural benefits, and practical applications for custom scheduling solutions.
Watching the Watchers - The Hidden Risks of Container Scanning Tools
Explore critical security risks and mitigation strategies for container vulnerability scanning tools, focusing on system protection, secure configurations, and defense-in-depth approaches.
From CNI to Service Mesh: Demystifying Kubernetes Networking
Dive into Kubernetes networking fundamentals, from container networking interfaces to service mesh architecture, covering pod communication, external access, and advanced routing capabilities.
IBAC for Developers - Automating Istio Authorization Policies Using Envoy Metrics With a Declarative Approach
Master Istio Authorization Policies automation through Envoy metrics, implementing identity-based access control with declarative methods for enhanced cloud security.
5 Essential Ansible Security Features for IT Automation
Discover how to enhance IT infrastructure security through 5 essential Ansible features, including SSH configuration, user management, vault encryption, firewall setup, and package updates.
Secure and Encrypted Boot in Zephyr RTOS Using Hardware Keys and TrustZone
Explore secure booting implementation in Zephyr RTOS using MCUboot, hardware keys, and encryption features like HAB and TF-M for enhanced embedded system security and tamper protection.
Migrating Operating Systems Toward Post-Quantum Cryptography
Explore post-quantum cryptography implementation strategies for operating systems, focusing on quantum-resistant algorithms, threat models, and practical integration in TLS, IPsec, and data storage.
Navigating the Quantum Readiness Journey - Open-Source Cryptography, PKI and Signing Tools
Explore post-quantum cryptography standards and their implementation in open-source tools, focusing on IoT, container security, and software supply chain protection through quantum-resistant solutions.
Three Categories of Rogue AI and How to Mitigate Risk
Discover essential strategies for identifying and defending against three types of rogue AI behaviors, including practical implementation of OWASP guidelines and Zero Trust frameworks for secure AI deployment.
Scanning Infrastructure as Code for Security Vulnerabilities with Terraform
Master infrastructure security scanning with Checkov OSS, focusing on Terraform vulnerabilities and exploring policy-as-code solutions like Bridgecrew and Hashicorp Sentinel for enhanced cloud security.
AI Under the Hood: Unmasking Hidden Threats
Explore a comprehensive analysis of AI threat modeling frameworks, examining safety protocols and risk assessment methods for AI/ML applications while learning to identify and address potential vulnerabilities.
Applying Generative AI to Container CVE Remediation in CI Pipelines
Discover how to leverage generative AI for automating container vulnerability remediation in CI pipelines, with practical demonstrations and implementable solutions for efficient security management.
How to Shift-Left and Find Critical Authorization Vulnerabilities Throughout Your CI/CD Pipeline
Discover effective strategies for detecting and preventing authorization vulnerabilities in DevSecOps pipelines, focusing on early identification and remediation across multiple application roles and APIs.
Safeguarding Machine Learning Systems - A Comprehensive Security Plan
Discover a holistic security framework for ML systems, covering data protection, model fortification, platform security, compliance measures, and human-centric safeguards for robust AI deployment.
Strengthening Defenses Against CI/CD Security Threats - Understanding and Mitigating Pipeline Vulnerabilities
Dive into essential CI/CD pipeline security, exploring OWASP's top risks, attack methodologies, and practical defense strategies to fortify your development infrastructure.
How AI Could Hack Democracy
Explore law professor Lawrence Lessig's critical analysis of AI's current impact on democratic systems and the urgent need for attention to these challenges before reaching AGI.
Cilium, eBPF, and WireGuard: Taming the Network Encryption Performance Gap
Explore network encryption optimization using Cilium, eBPF, and WireGuard, focusing on performance impacts and solutions for secure data transit while minimizing operational overhead.
TUF - Secure Distribution Beyond Software
Discover how The Update Framework (TUF) enables secure distribution of metadata, signing keys, and attestations while ensuring data integrity and tamper resistance in cloud native ecosystems.
Workload Identity Federation - Stop Using Long-Lived Credentials in Kubernetes Security
Discover how to implement workload identity federation in Kubernetes, enhancing security through credential management while improving developer experience and reducing system outages.
Secure by Design CI/CD: Practical Insights for Pipeline Security
Discover practical strategies for securing CI/CD pipelines through real-world insights from Adobe and Autodesk, featuring reference architectures, security controls, and implementation of CNOE stacks for cloud-native excellence.