FedSearch - Federated network search engine

#VMware Carbon Black Cloud의 내재적 보안 통합 요소
1. #vSphere 통합
2. #NSX 통합
3. 컨테이너 보안 통합
온프레미스 제품군에는 제공하지 않는다. 모두 Gartner의 #CWPP 개념에 맞추어 솔루션 형태로 개발 중이다.
#Gartner #containersecurity

#vmware #vsphere #nsx #cwpp #gartner #containersecurity

Last updated 2 years ago

Original post

Unni P · @iamunnip

5 followers · 45 posts · Server cloud-native.social

Open media

It's Time to Adopt Zero Trust Container Security. The idea of Zero Trust is “Never trust, always verify.”

Get the guide: https://more.suse.com/zero-trust-security-for-dummies.html
Credit: SUSE
#containersecurity #zerotrust

#containersecurity #zerotrust

Last updated 2 years ago

Original post

Renaud Lifchitz :verified: · @nono2357

258 followers · 1414 posts · Server infosec.exchange

GitHub - GitHub - krol3/container-security-checklist: Checklist for container security - devsecops practices

RT @7h3h4ckv157
𝐂𝐨𝐧𝐭𝐚𝐢𝐧𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐧𝐭𝐞𝐧𝐭𝐬 📢

Container Security CheckList by Carol Valência: https://lnkd.in/df5CciCJ

Container Security CheckList by Gunjan: https://lnkd.in/d9QBsBki

#Container #containersecurity #infosec #Hacking #cybersecuritytips #DevOps #owasp

#container #containersecurity #infosec #hacking #cybersecuritytips #devops #owasp

Last updated 2 years ago

Original post

Romano Roth · @romanoroth

13 followers · 39 posts · Server fosstodon.org

How to find vulnerabilities in your container images with GitHub?

In Part 6/12 of our video series, Patrick Steger and I will show you how to find vulnerabilities in your container images using GitHub.

👉 link to the video https://youtu.be/_ZeKh3GcbgU

#github #devsecops #devops #container #containersecurity

Last updated 2 years ago

Original post

Paul Reynolds :verified: · @ren

64 followers · 9 posts · Server infosec.exchange

Open media

More Wiz Academy content, bringing 2022's work to a close. Wishing you and yours a peaceful holiday 🎄🎄🎄

https://www.wiz.io/academy/container-security-best-practices-for-vulnerability-management

#cybersecurity #cloudsecurity #containersecurity #containerization #kubernetessecurity

Last updated 2 years ago

Original post

Paul Reynolds :verified: · @ren

64 followers · 10 posts · Server infosec.exchange

Open media

More Wiz Academy content, bringing 2022's work to a close. Wishing you and yours a peaceful holiday 🎄🎄🎄

https://www.wiz.io/academy/container-security-best-practices-for-vulnerability-management

#cybersecurity #cloudsecurity #containersecurity #containerization #kubernetessecurity

Last updated 2 years ago

Original post

Liath :donor: · @liath

59 followers · 57 posts · Server infosec.exchange

2023 Goals:
- Build more #Linux expertise to help with threat identification, analysis and defense.
@hal_pomeranz - your threads here and sessions at BHIS are pure gold. 🥇 Thank you.
- Dive further into #containersecurity
If anyone has good follows or resources for a container noob, I'd appreciate the nudge.
- Plan for what I hope is a northern European vacation - Scotland, Sweden, Finland, Denmark.
- Break out of my shell when I attend events like #defcon. My imposter syndrome kicks in and I lurk but don't connect.
- Spend less time in the muck of useless drama. More time on actions that improve me, my family, my clients and society as a whole.

#linux #containersecurity #defcon

Last updated 2 years ago

Original post

Astra Kernel :verified_paw: · @AstraKernel

183 followers · 269 posts · Server infosec.exchange

AWS ECR Public Vulnerability

AWS Elastic Container Registry Public (ECR Public) vulnerability:

=>Hackers can delete, update, and create ECR Public images, layers, and tags in registries and repositories that belong to victims' AWS Accounts

https://blog.lightspin.io/aws-ecr-public-vulnerability

Credit: @gafnitav @LightspinTech

#infosec #AwsSecurity #ContainerSecurity #Devops #DevSecops #kubernetes #websecurity

#infosec #awssecurity #containersecurity #devops #devsecops #kubernetes #websecurity

Last updated 2 years ago

Original post

Astra Kernel :verified_paw: · @AstraKernel

139 followers · 211 posts · Server infosec.exchange

#Quibble: Container Security tool

- Rust based open-source container analysis tool that reads and assesses various security, quality and noteworthy things about your configuration and setup

https://geekmasher.dev/sec/quibble/22-12-08--quibble-intro/

#DevOps #DevSecOps #Docker #DockerSecurity #k8s #kubernetes #containers #containersecurity

@geekmasher

#quibble #devops #devsecops #docker #dockersecurity #k8s #kubernetes #containers #containersecurity

Last updated 2 years ago

Original post

Volkan Özçelik · @volkan

19 followers · 858 posts · Server z2h.dev

Exploiting Distroless Images

“Distroless” does not immediately mean 100% secure.

Exploiting Distroless Images »
https://www.form3.tech/engineering/content/exploiting-distroless-images

#articles #security #distroless #ContainerSecurity

#articles #security #distroless #containersecurity

Last updated 2 years ago

Original post

Astra Kernel · @AstraKernel

36 followers · 59 posts · Server infosec.exchange

Sysdig - Analysis on Docker Hub malicious images: Attacks through public container images – Sysdig

Analysis on Docker Hub malicious images: Attacks through public container images

https://sysdig.com/blog/analysis-of-supply-chain-attacks-through-public-docker-images/

#KubernetesSecurity #ContainerSecurity
#docker #dockerhub #devops

#kubernetessecurity #containersecurity #docker #dockerhub #devops

Last updated 2 years ago

Original post

DevelopersJourney · @ItsAMeMarcel

3 followers · 15 posts · Server social.linux.pizza

I did a lot of #docker projects in the last years. This year l made my first experience with #podman and I love it 😍
Mainly I like the concept of starting container #rootless. This has a lot of advantages regarding #security. If you have the chance you should definitely have a look at this new #technology.
#software #container #containersecurity