Cloud Native Now: “Cloud-Native AI Workloads: Scalability, Sustainability and Security”
AI is the fastest-growing class of workloads in the cloud. The data it handles is often sensitive and/or regulated, and the models are valuable. Can we better protect AI? Can we rein in AI costs and…
Confidential computing: great for security, not for privacy
Guest post originally published on Elastisys’ blog In this post, we take a closer look at confidential computing (CC). What is it? What does it promise? Does it live up to its hype? And can companies…
The New Stack: “Cilium CNCF Graduation Could Mean Better Observability, Security with eBPF”
eBPF (extended Berkeley packet filter) is a powerful technology that operates directly within the Linux kernel, offering robust hooks for extending runtime observability, security, and networking capabilities across various deployment environments. While eBPF has gained widespread…
Community post originally published on Medium by Mathieu Benoit In Kubernetes 1.25 as stable (and since 1.23 as beta), the Pod Security admission (PSA) controller replaces PodSecurityPolicy (PSP), making it easier to enforce predefined Pod Security Standards (PSS) by simply adding a…
Kubernetes security: best practices for Kubernetes secrets management
Guest post originally published on the CyberArk blog by John Walsh Kubernetes has come a long way since its inception. But as the adoption of containerization has grown, Kubernetes security continues to be top of mind. Red Hat’s “The…
CNCF On demand webinar: Enhancing business security and compliance with Service Mesh
In the dynamic landscape of cloud-native microservice architectures, businesses face unique security challenges that require innovative solutions. As access control gains importance, the emergence of service mesh, particularly within Kubernetes environments, is reshaping security strategies. This…
Kubernetes 1.28: the security perspective
Guest post originally published on ARMO’s blog by Ben Hirschberg, CTO & Co-founder at ARMO With each release, Kubernetes introduces new features and enhancements to improve the user experience and address the evolving needs of its users. Today’s…
Dragonfly completes security audit!
Project post originally published on the Dragonfly blog This summer, over four engineer weeks, Trail of Bits and OSTIF collaborated on a security audit of Dragonfly2. A CNCF Incubating Project, Dragonfly2 functions as file distribution for peer-to-peer technologies. Included in the scope…
Kyverno completes fuzzing security audit
Project post originally published on the Kyverno blog by Adam Korczynski Presenting the results from the fuzzing security audit Kyverno, a CNCF policy engine for Kubernetes, is happy to announce the completion of its fuzzing security…
Introduction: what is container runtime security?
Member post by Rob Newsome, Head of Product Management at stack.io Container runtime security represents the proactive measures and controls used to protect a containerized application during its runtime phase. In the contemporary world of DevOps,…