Cloud Computing

Understanding the Kubernetes Security Triad: Image Scanning, Admission Controllers, and Runtime Security

November 21, 2023

Kubernetes, also known as K8s, is a very complex open-source platform that requires detailed attention to security. Despite previous efforts to increase its security, Kubernetes remains insecure by default and requires different security tools to protect the cluster.

Cloud Computing: Cloud computing is a mechanism for providing IT-related functionality as a service, allowing users to access technology-enabled services from the Internet without needing the knowledge, expertise or control over supporting infrastructure. Read more

PAGES:
1
2
3
4
5

Exploring Potential Security Challenges in Microsoft Azure
March 29, 2023
Our research identifies sensitive environmental variables in the Microsoft Azure environment that, when leaked, can be used by malicious actors to compromise the entire serverless environment.
Read more
Trend Micro Security Predictions for 2023: Future/Tense
December 13, 2022
Enterprises and organizations are facing a period of transition and uncertainty – malicious actors will hunker down and reuse tried-and-tested tools and techniques.
Read more
Defending the Expanding Attack Surface: Trend Micro 2022 Midyear Cybersecurity Report
August 31, 2022
In our midyear security roundup, we highlight the most significant security stories that made a considerable impact on the threat landscape in the first half of 2022 amid a diffused labor pool and a widening digital attack surface.
Read more
Analyzing the Risks of Using Environment Variables for Serverless Management
July 14, 2022
We examined the potential risks associated with using the serverless environment service for secrets management.
Read more
An Analysis of Azure Managed Identities Within Serverless Environments
June 14, 2022
We examine Azure’s Managed Identities service and its security capability in a threat model as developers’ go-to feature for managing secrets and credentials.
Read more
Crafting an Azure App Services Threat Model
May 04, 2022
We looked into Azure App Services and created a threat model to mitigate the impact of threats on the infrastructure and applications.
Read more
How Cybercriminals Abuse Cloud Tunneling Services
April 26, 2022
Our research examines how cloud tunneling services work and how organizations can thwart threats that abuse them.
Read more
Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups
March 29, 2022
Our research into cloud-based cryptocurrency mining sheds light on the malicious actor groups involved in this space, their ongoing battle for cloud resources, and the actual extent of the impact of their attacks.
Read more
GitHub Action Runners: Analyzing the Environment and Security in Action
January 18, 2022
More organizations are applying a DevOps thought-process and methodology to optimize software development. One of the main tools used in this process is a continuous integration (CI) tool, which automates the integration of code changes from multiple developers working on the same project.
Read more

PAGES:
1
2
3
4
5

深入了解網路資安風險指標 (CRI)

Cloud Computing