Search results for: security


Building a zero CVE strategy

Posted on July 24, 2024

Member post originally published on the Kubesimplify blog by Kunal Verma With the increase in software complexity and as digital threats evolve (as discussed in our previous blog) in today’s digital age, the organizations are facing a…


Cloud Native Live: Tetragon Kubernetes Policy Filtering

Posted on July 24, 2024

Tetragon is a flexible Kubernetes-aware security observability and runtime enforcement tool that applies policy and filtering directly with eBPF, allowing for reduced observation overhead, tracking of any process, and real-time enforcement of policies. Tetragon allows for…


Authentication vs authorization: understanding the difference

Posted on July 23, 2024

Member post originally published on the Cerbos blog by Omu Inetimi Authentication vs Authorization: Understanding the Difference In recent times, security in modern applications cannot be overemphasized. It is extremely important to ensure our applications have…


Lessons from CrowdStrike’s buggy update: the critical importance of robust release processes

Posted on July 19, 2024

Community post by Andrés Vega, M42 and Technical Leader, CNCF TAG Security Recent events involving CrowdStrike’s Falcon security software have underscored a critical lesson across the industry: the importance of having a robust, secure release process….


Cloud Native Glossary — the Turkish version is live! (blog in English + Turkish)

Posted on July 18, 2024

The Cloud Native Glossary is a project led by the CNCF Business Value Subcommittee. Its goal is to explain cloud native concepts in clear and simple language without requiring any previous technical knowledge. We are in…


Kubestronaut in Orbit: Eleni Grosdouli

Posted on July 16, 2024

Get to know Eleni This week’s Kubstronaut in Orbit, Eleni Grosdouli, brings diverse experiences to her role as a DevOps Consulting Engineer at Cisco Systems. She’s the go-to person for DevOps and Kubernetes Automation, with a…


Now what? Kubernetes troubleshooting with AI?

Posted on July 11, 2024 | Emin Alemdar

Ambassador post originally published on Medium by Emin Alemdar We all know that Kubernetes troubleshooting is difficult and it can get pretty complex from time to time. We can easily get lost in the logs, jumping…


CNCF On demand webinar: Level up your GitHub repo config game

Posted on July 11, 2024

If you’re like many open source project maintainers, your project might span tens or hundreds of GitHub repos, and your repo configuration may be wildly variable. How do you make sure that your repos always have…


Cloud Native Live: Intent-based access control at scale with BPF and traffic pattern detection

Posted on July 9, 2024

Managing network access policies in large-scale Kubernetes environments is a constant challenge. Traditional allow/deny lists become unmanageable as deployments grow, leading to security gaps and operational bottlenecks. Add workload identity management and application-level access policies to…


The New Stack: “10 Enterprise Tech Conferences To Consider for Later This Year”

Posted on July 4, 2024

Conferences: Whether you like ’em or not, they’re back in full force this year. And just in time too, because the world of enterprise tech has a lot to discuss. From generative AI to open source, platform engineering, cybersecurity, API-first development and beyond,…