Kubernetes & Container Security

Purple background with a text in red, spooky font saying: Tales from the Kernel Parameter Side
Kubernetes & Container Security

Tales from the Kernel Parameter Side

Users live in the sunlit world of what they believe to be reality. But, there is, unseen by most, an...
Jason Andress | November 9th, 2022
Read more
Threat Research, Kubernetes & Container Security

How the Critical OpenSSL Vulnerability may affect Popular Container Images
Webinar

Is Your SecOps Ready for Cloud and Containers?
Kubernetes & Container Security

Image scanning for GitLab CI/CD
Cloud Security (217) Compliance (56) Kubernetes & Container Security (205) Monitoring (96) Open Source (85) Sysdig Features (154) Threat Research (92)
Filter By:
Reset Filters
Showing 181-192 of 204
Open Source, Kubernetes & Container Security, Threat Research

How to mitigate CVE-2021-33909 Sequoia with Falco – Linux filesystem privilege escalation vulnerability

The CVE-2021-33909, named Sequoia, is a new privilege escalation vulnerability that affects Linux’s file system. It was disclosed in July,...
Alberto Pellitteri | July 28th, 2021
Cloud Security, Kubernetes & Container Security

How to Establish a Culture of Secure DevOps

We’re constantly told to “Shift Left” and that Secure DevOps is the only way to have confidence in your cloud...
Chris Kranz | July 16th, 2021
Falco and Prometheus can help detect new crypto mining attack targeting Kubeflow and TensorFlow
Threat Research, Cloud Security, Kubernetes & Container Security, Open Source

Detecting new crypto mining attack targeting Kubeflow and TensorFlow

Microsoft has discovered a new large-scale attack targeting Kubeflow instances to deploy malicious TensorFlow pods, using them to mine Monero...
Stefano Chierici | June 30th, 2021
Kubernetes & Container Security

Top vulnerability assessment and management best practices

Vulnerability assessment and vulnerability management practices are critical to minimizing the exposure and attack surface of your whole infrastructure. We’re...
Víctor Jiménez Cerrada | June 22nd, 2021
Kubernetes & Container Security, Cloud Security, Sysdig Features

Automated Falco rule tuning

We recently released the automated Falco rule tuning feature in Sysdig Secure. Out-of-the-box security rules are a double-edged sword. On...
Eric Lugo | June 9th, 2021
Threat Research, Kubernetes & Container Security, Open Source

Detecting and Mitigating CVE-2021-25737: EndpointSlice validation enables host network hijack

The CVE-2021-25737 low-level vulnerability has been found in Kubernetes kube-apiserver where an authorized user could redirect pod traffic to private...
Stefano Chierici | May 24th, 2021
Open Source, Kubernetes & Container Security, Threat Research

Exploiting and detecting CVE-2021-25735: Kubernetes validating admission webhook bypass

The CVE-2021-25735 medium-level vulnerability has been found in Kubernetes kube-apiserver that could bypass a Validating Admission Webhook and allow unauthorised...
Stefano Chierici | April 28th, 2021
Threat Research, Kubernetes & Container Security, Open Source

Mitigating CVE-2021-20291: DoS affecting CRI-O and Podman

The CVE-2021-20291 medium-level vulnerability has been found in containers/storage Go library, leading to Denial of Service (DoS) when vulnerable container...
Stefano Chierici | April 16th, 2021
Open Source, Kubernetes & Container Security

Unveil hidden malicious processes with Falco in cloud-native environments

Detecting malicious processes is already complicated in cloud-native environments, as without the proper tools they are black boxes. It becomes...
Kaizhe Huang | April 13th, 2021
Cloud Security, Kubernetes & Container Security, Sysdig Features

Unified threat detection for AWS cloud and containers

Implementing effective threat detection for AWS requires visibility into all of your cloud services and containers. An application is composed...
Vicente Herrera García | March 30th, 2021
Threat Research, Kubernetes & Container Security

Detecting and mitigating Apache Unomi’s CVE-2020-13942 – Remote Code Execution (RCE)

CVE-2020-13942 is a critical vulnerability that affects the Apache open source application Unomi, and allows a remote attacker to execute...
Stefano Chierici | March 10th, 2021
Kubernetes & Container Security

Top 20 Dockerfile best practices

Learn how to prevent security issues and optimize containerized applications by applying a quick set of Dockerfile best practices in...
Álvaro Iradier | March 9th, 2021
1 … 14 15 16 17

Subscribe to our newsletter and get the latest updates!