Securing Your Cloud Native Stack with Policy-as-Code and OPA
Explore policy-as-code and OPA for securing cloud-native stacks. Learn implementation strategies and best practices for robust security in modern infrastructure.
Cloud Native Security Landscape - Myths, Dragons, and Real Talk
Explore cloud-native security across the software lifecycle, from open-source creation to runtime threat detection. Learn about key projects, developer-security team collaboration, and separating real risks from myths.
Cloud Native Application Security with Open Source
Explore cloud native app security risks, identification methods, and open-source tools for risk mitigation in developer-friendly environments. Learn to integrate security into workflows.
Achieving Faster ATO on Cloud Native Applications with DISA STIG Certified Kubernetes
Accelerate ATO and FedRAMP approval for cloud-native apps using a DISA STIG certified Kubernetes stack. Learn how integrated, secure container orchestration can speed up value delivery for demanding sectors.
eBPF Security - Introduction to Kernel-Level Security Monitoring
Explore advanced eBPF security implementations in networking and transport stacks, focusing on KubeArmor maintenance, packet routing optimization, and data-center network security principles.
Bypassing Falco - How to Compromise a Cluster without Tripping the SOC
Explore techniques to bypass Falco's default ruleset, enabling stealthy cluster compromise. Learn 9 bypass classes for target enumeration, privilege escalation, and lateral movement without alerting security teams.
SIG Auth Deep Dive - Current Projects and Future Directions
Deep dive into Kubernetes SIG Auth's current projects, including Pod Security, KMS encryption enhancements, authentication configuration, and certificate signing request controls.
Cloud Native Live - Locking Down Your Cluster
Explore strategies for enhancing Kubernetes cluster security, including best practices, tools, and techniques to protect against vulnerabilities and unauthorized access.
Desktop to Deployment: Kubernetes Security with Checkov
Explore K8s security from desktop to deployment using Checkov. Learn about OS Top 10, CI monitoring, customization, and admission controllers for robust cloud-native security practices.
Tweezering Kubernetes Resources - Operating on Operators
Explore Kubernetes Operators' security risks, threat modeling, and best practices for secure implementation. Learn to assess third-party Operators and conduct effective code reviews for enhanced cluster safety.
Too Much to Choose - Making Sense of Kubernetes Security Standards
Explore Kubernetes security standards, their comparisons, and open-source tools for compliance assessment. Gain insights on choosing and implementing the right standards for your cluster.
A Treasure Map of Hacking and Defending Kubernetes
Comprehensive guide to Kubernetes security: threat modeling, attack demonstrations, defense strategies, and advanced topics like workload identity and runtime hardening for robust cluster protection.
Secure by Default with GitOps - A Guide to OPA with Argo CD
Learn to integrate Argo CD and Open Policy Agent for secure GitOps practices, enhancing software delivery supply chain security through admission hooks, sync waves, and other strategies.
Foster Secure Innovation with Your Kubernetes Platform
Explore comprehensive security strategies for Kubernetes, covering infrastructure protection, supply chain security, and runtime safeguards in mission-critical cloud-native environments.
How to Consume CNCF KubeArmor from AWS Marketplace
Explore how to utilize CNCF KubeArmor from AWS Marketplace, enhancing cloud-native security and compliance for your Kubernetes environments.
Rocking Kubernetes Security - Safeguarding Hundreds of Clusters in a Multi-Cloud Environment
Safeguarding multi-cloud Kubernetes clusters: Learn to manage security in dynamic environments with on-demand provisioning using a single automation tool. Discover strategies for protecting against emerging threats.
Rocking Kubernetes Security - Safeguarding Hundreds of Clusters in a Multi-Cloud Environment
Explore strategies for securing hundreds of Kubernetes clusters in a dynamic multi-cloud environment using automation tools, addressing emerging threats and on-demand provisioning challenges.
The Attacker Perspective - Insights From Hacking Alibaba Cloud's Managed Kubernetes Environments
Explore real-world hacking of managed Kubernetes environments, from initial access to unauthorized database access. Learn to strengthen deployments and enhance security posture through this step-by-step case study.
Kubernetes Security: Navigating Real-World Challenges
Explore real-world Kubernetes security challenges and learn foundational strategies to protect clusters using open-source tools, covering diverse security considerations beyond basic vulnerability scanning.
Secure API Access to Kubernetes Control Plane with Sakshyam Shah
Learn Kubernetes API server security: authentication, authorization, and admission control best practices for secure control plane access and robust cluster management.
Secure Your Kubernetes Clusters With Kubescape by Armosec
Learn to secure Kubernetes clusters using Kubescape, an open-source tool for risk analysis, security compliance, RBAC visualization, and image vulnerability scanning. Gain hands-on experience with installation, scanning, and result interpretation.