Product
Navigating the Post-VMware Era: Accelerating Cloud Migration with Nirmata Control Hub
For VMware users, the shift to Kubernetes and containers can seem daunting. This is where Nirmata Control Hub steps in with unified governance.
5 min read
Category
Product
147 posts · Page 4 of 13
Product
Why You Should Use Nirmata Enterprise for Kyverno (N4K)
Nirmata Enterprise for Kyverno (N4K) is the enterprise-grade distribution of Kyverno that is fully compliant with industry standards and configured for scale
5 min read
Product
Multi-Cluster Policy Exception Management with Nirmata
What is a Policy Exception Often, only some policies and rules the security or platform team defines are universally applicable. Sometimes, a developer needs an exception…
3 min read
Product
Securing Your Pipeline With Policy as Code
Why Scan Pipelines? Scanning CI/CD pipelines i.e. Git repositories for misconfigurations is crucial for ensuring the security and reliability of your software projects…
3 min read
Product
Securing GitLab Pipelines with Nirmata for Enhanced Governance
Applying security policies in CI pipelines ensures that security measures are integrated into the development process from the outset, reducing the risk of introducing…
3 min read
Engineering
XZ: A Case Study in Open-Source Supply Chain Attacks
CVE-2024-3094 is a CVSS 10.0 backdoor in XZ Utils 5.6.0 and 5.6.1. Downgrade to 5.4.6 or move to 5.6.2, then block affected images with a Kyverno policy.
6 min read
Product
Preventive Security vs Detection and Response
Preventive security stops misconfigurations before deployment, while detection and response catches threats at runtime. How they differ and why you need both.
4 min read
Product
Proactive vs Reactive Security: A Paradigm Shift in Application Security
The shift from reactive to proactive measures marks a significant paradigm change for application security. This transformation is pivotal in the way organizations…
3 min read
Engineering
Locked Doors, Untrusted Keys: Securing Containers in the Wake of Leaky Vessel Vulnerabilities
Leaky Vessels (CVE-2024-21626) lets a container reach the host filesystem through runc 1.1.11 and earlier. Patch to runc 1.1.12 and audit nodes with Kyverno.
7 min read
Engineering
Preventing “Sys:All” vulnerability from ruining your day
Google Kubernetes Engine (GKE) is a popular tool for managing containerized applications. However, a critical vulnerability has been discovered in GKE that could allow…
2 min read
Engineering
Using nctl to enforce security in CI/CD pipelines
In today's age of advanced technology platforms, organizations must proactively prioritize security concerns across all teams and platforms. Nirmata offers an efficient…
1 min read
Engineering
Mitigating the Latest Kubernetes NGINX Ingress Controller CVEs
Ingress users can steal ingress-nginx credentials via CVE-2023-5043, CVE-2023-5044 and CVE-2022-4886. Upgrade to v1.9.0 and block the annotations with Kyverno.
3 min read