Security BSides Sofia 2022 - Anton Sankov's 'Securing Kubernetes With Open Policy Agent' →
Our thanks to Security BSides Sofia for publishing their Presenter’s Security BSides Sofia 2022 superb security videos on the organization’s’ YouTube channel.
OWASP® Global AppSec US 2021 Virtual - Michele Chubirka's 'Container Security: It’s All About The Supply Chain' →
Our thanks to both the OWASP® Foundation and the OWASP Global AppSec US 2021 Virtual Conference for publishing their well-crafted application security videos on the organization’s’ YouTube channel.
OWASP® Global AppSec US 2021 Virtual - Rory McCune's 'Cluster Wrangling: How To Make Kubernetes Clusters Secure And Usable' →
Our thanks to both the OWASP® Foundation and the OWASP Global AppSec US 2021 Virtual Conference for publishing their well-crafted application security videos on the organization’s’ YouTube channel.
DEF CON 27, Packet Hacking Village - Jay Beale's 'Attacking And Defending Kubernetes' →
Thanks to Def Con 27 Volunteers, Videographers and Presenters for publishing their superlative conference videos via their YouTube Channel for all to see, enjoy and learn.
DEF CON 27, Appsec Village, YanYan Wang's 'Automate Pen Testing In Dockerized CI CD Environment' →
Docker Hub, The Backdoor
Dan Goodin, writing at Ars Technica, reported. last week of the backdooring of the Docker Hub by compromised Docker images placed on the site. Apparently, all is well now, as the backdoored image has been removed (after five solid months of public complaints)... The takeaway? Timely Security Hygiene Is A Crucial Attribute For Success Docker Hub Admins!
"Neither the Docker Hub account nor the malicious images it submitted were taken down. Over the coming months, the account went on to submit 14 more malicious images. The submissions were publicly called out two more times, once in January by security firm Sysdig and again in May by security company Fortinet. Eight days after last month's report, Docker Hub finally removed the images." - via Dan Goodin, writing at everyone's beloved Ars Technica
Daniel Stori's 'The CHROOT Case' →
Security, Containered →
via author Tom Mackey, writing at Container Journal, comes this well-wrought piece targeting security challenges with container deployments. Today's Must Read.