462 posts · Page 15 of 39
Engineering
Introduction In our previous blog post, we delved into the importance of addressing CVEs within application libraries and outlined strategies for remediation. Continuing…
5 min read
Other
Although CVE-2024-3177 has a low impact and potentially minimal attack surface, it does highlight the importance of utilizing a policy engine (Kyverno) and a central…
2 min read
Engineering
Get CVE-free container images: scan with Trivy, trace each library with Gradle dependencyInsight, then upgrade, force or replace it, and fail CI on new CVEs.
9 min read
Engineering
CVE-2024-3094 is a CVSS 10.0 backdoor in XZ Utils 5.6.0 and 5.6.1. Downgrade to 5.4.6 or move to 5.6.2, then block affected images with a Kyverno policy.
6 min read
Events
This year, KubeCon + CloudNativeCon Europe 2024 drew over 12,000 tech enthusiasts from the leading cloud native and open source communities, and celebrated the milestone…
4 min read
Kyverno
Introduction Recently, Akamai's Tomer Peled announced a security threat to Kubernetes clusters, CVE-2023-5528. A user who can create pods and persistent volumes on…
1 min read
Events
We are very excited to announce that team Nirmata is a Silver sponsor of KubeCon + CloudNativeCon Europe 2024 from March 19-22. Our team is all geared up for this event…
5 min read
Product
Preventive security stops misconfigurations before deployment, while detection and response catches threats at runtime. How they differ and why you need both.
4 min read
Product
The shift from reactive to proactive measures marks a significant paradigm change for application security. This transformation is pivotal in the way organizations…
3 min read
Engineering
Leaky Vessels (CVE-2024-21626) lets a container reach the host filesystem through runc 1.1.11 and earlier. Patch to runc 1.1.12 and audit nodes with Kyverno.
7 min read
Engineering
This blog post was co-authored by Khaled Emara. About Kyverno Kyverno is a policy engine designed for Kubernetes and cloud native workloads. Policies can be managed as…
9 min read
Engineering
Google Kubernetes Engine (GKE) is a popular tool for managing containerized applications. However, a critical vulnerability has been discovered in GKE that could allow…
2 min read
Subscribe to our free monthly newsletter to get industry news, DevOps tips, and articles right to your inbox on Kyverno, containerization, Kubernetes deployment & management and more.
