News

Introducing Nirmata Control Hub: SecOps Automation at Scale with Policy-as-Code

As modern enterprises embrace cloud-native technologies and hybrid multi-cloud environments, the complexity of managing security and compliance is reaching unprecedented levels. Each cloud platform comes with hundreds of services, adding layers of complexity to already intricate architectures. Containers have become the default packaging for modern…

0

Rapid Mitigation of CVE-2023-2878 with Kyverno and Nirmata Control Hub

A recently discovered vulnerability (CVE-2023-2878) in the secrets-store-csi-driver component of Kubernetes poses a significant security risk. If exploited, this vulnerability could result in the disclosure of sensitive service account tokens. Service account tokens function as authentication credentials, allowing applications operating within a Kubernetes cluster to…

0

Locked Doors, Untrusted Keys: Securing Containers in the Wake of Leaky Vessel Vulnerabilities

The recent buzz surrounding the actively exploited runc vulnerabilities “Leaky Vessels”  (CVE-2024-21626) serves as a timely reminder of two essential container security principles: image trust and comprehensive patching. Let’s delve into why these aspects are crucial for your containerized environments. Trustworthy Images are Foundational: It…

0