Virtualization & Cloud

A critical asset that enterprises should give careful security consideration to is their back-end infrastructure which, if compromised, could lead to supply chain attacks.

Sua imagem de contêiner é confiável? Saiba como o Docker Content Trust (DCT) emprega assinaturas digitais para verificação de imagem de contêiner e gerencia coleções confiáveis de conteúdo.

We outline security mitigations and settings that should be prioritized in a clustered environment. The second part of our security guide on Kubernetes clusters covers best practices related to worker nodes, the kubelet, pods, and audit logs.

In our monitoring of Docker-related threats, we came across a threat actor who uploaded malicious images to Docker Hub for cryptocurrency mining.

Serverless computing is not immune to risks and threats. Our security research provides a comprehensive analysis of the possible attack scenarios that could compromise serverless services and deployments.

Security issues often arise as a result of applications being rushed for deployment without adequate checks and protections. What are the top security risks to applications and what can organizations do to secure their DevOps pipeline?

Infrastructure as Code (IaC) is a key DevOps practice that bolsters agile software development. In this report, we identify security risk areas in IaC implementations and the best practices in securing them in hybrid cloud environments.

Cloud-native security adopts the defense-in-depth approach and divides the security strategies utilized in cloud-native systems into four different layers which are seen in “The 4Cs of Cloud-native Security.”

Quais são as responsabilidades de segurança de quem desenvolve em nuvem e como eles devem manter a segurança em nuvem? Esta cartilha discute os principais conceitos de segurança cloud e quais áreas precisam ser protegidas usando soluções de segurança flexíveis