Threat Research

Threat Research

Building Honeypots with vcluster and Falco: Episode II

This is part two in our series on building honeypots with Falco, vcluster, and other assorted open source tools. For...
Jason Andress | April 10th, 2024
Read More
Threat Research, Cloud Security

RUBYCARP: A Detailed Analysis of a Sophisticated Decade-Old Botnet Group
Threat Research

Cloud Threats Deploying Crypto CDN
Threat Research

SSH-Snake: New Self-Modifying Worm Threatens Networks
Cloud Security (272) Compliance (63) Kubernetes & Container Security (212) Monitoring (97) Open Source (89) Sysdig Features (159) Threat Research (98)
Filter By:
Reset Filters
Showing 49-60 of 97
kubernetes honeypot vcluster Falco
Kubernetes & Container Security, Threat Research

Building honeypots with vcluster and Falco: Episode I

Honeypots are, at a high level, mechanisms for luring attackers in order to distract them from legitimate access or to...
Jason Andress | October 4th, 2022
Sysdig 2022 Cloud-native threat report
Cloud Security, Kubernetes & Container Security, Open Source, Threat Research

Sysdig 2022 Threat Report: Cloud-native threats are increasing and maturing

The first annual cloud-native threat report from Sysdig explores some of the year’s most important security topics in the cloud....
Michael Clark | September 28th, 2022
TeamTNT exploit misconfigured kubelet Kubernetes
Kubernetes & Container Security, Threat Research

Threat news: TeamTNT targeting misconfigured kubelet

TeamTNT is a prevalent threat actor who has been targeting cloud and virtual environments such as Kubernetes and Docker since...
Alberto Pellitteri | September 19th, 2022
machine learning security
Cloud Security, Kubernetes & Container Security, Threat Research

The Quiet Victories and False Promises of Machine Learning in Security

Contrary to what you might have read on the Internet, machine learning (ML) is not magic pixie dust. It’s a...
Anna Belak | September 2nd, 2022
Blackhat 2022 recap
Cloud Security, Compliance, Kubernetes & Container Security, Open Source, Threat Research

Blackhat 2022 recap – Trends and highlights

Blackhat 2022, on its 25th anniversary, took place this week in Las Vegas. It’s the most important event for the...
Miguel Hernández | August 12th, 2022
How to train security machine learning model
Kubernetes & Container Security, Cloud Security, Threat Research

Cryptominer detection: a Machine Learning approach

Cryptominers are one of the main cloud threats today. Miner attacks are low risk, low effort, and high reward for...
Flavio Mutti | August 10th, 2022
malware detection machine learning Sysdig
Sysdig Features, Kubernetes & Container Security, Threat Research

Detect cryptojacking with Sysdig’s high-precision machine learning

Is cryptojacking draining your resources and exposing your organization to financial and reputation damage risk? The rise in cryptojacking, which...
Daniella Pontes | August 10th, 2022
container escape - Falco detect capabilities
Kubernetes & Container Security, Threat Research

How to detect the containers’ escape capabilities with Falco

Attackers use container escape techniques when they manage to control a container so the impact they can cause is much...
Stefano Chierici | June 21st, 2022
How to detect BPFDoor with Falco
Kubernetes & Container Security, Open Source, Threat Research

Breaking down firewalls with BPFDoor (no e!) – How to detect it with Falco

BPF (not eBPF), typically viewed from a defender/sysadmin’s perspective, provides easy access to network packets and the ability to take...
Nicholas Lang | June 9th, 2022
CVE-2022-26134 Atlassian Confluence zero day
Threat Research

Detecting and mitigating CVE-2022-26134: Zero day at Atlassian Confluence

A new zero day vulnerability actively exploited in the wild has been found in Atlassian Confluence. The vulnerability CVE-2022-26134 affects...
Alberto Pellitteri | June 3rd, 2022
Secure K8s with Falco and Atomic Red Team
Kubernetes & Container Security, Open Source, Threat Research

How to use Atomic Red Team to test Falco rules in K8s

The best way to know if something works is to try it out. Ensuring that your security products are actually...
Jason Avery | May 31st, 2022
Kubernetes & Container Security, Open Source, Threat Research

How to detect TOR network connections with Falco

TOR was created with the idea of anonymizing connections across the Internet, but as in other instances, this can be...
Jason Donahue | May 26th, 2022
1 … 3 4 5 6 7 … 9

Subscribe to our newsletter and get the latest updates!