PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Docker & Kubernetes Container Security Explained

aikido.dev | blog | #cloud-security | #kubernetes | #container-security | #docker | #best-practices | #misconfiguration | #runtime-security | #image-security | #cluster-configuration | #image-integrity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Securing Docker and Kubernetes means addressing image integrity, cluster configuration, and runtime monitoring together—one weak link can expose the entire application stack to attackers.
Published
Collected

Related coverage

blog · wiz.io
Announcing the Release of "Kubernetes Security for Dummies"
Wiz and Wiley release 'Kubernetes Security for Dummies,' covering cloud-native fundamentals, cluster hardening, container security, compliance automation and ten best practices.
blog · wiz.io
Unveiling eBPF: Harnessing Its Power to Solve Real-World Issues
Part two of Wiz's eBPF series: kernel-level observability answers real security questions—container escape attempts, RCE via non-standard sockets, /etc/shadow access—to harden Kubernetes workloads.
blog · wiz.io
Docker and Kubernetes, we have got you covered: Wiz simplifies compliance and security posture management for Docker and Kubernetes environments.
Wiz extends its CIS SecureSuite Vendor Certification to CIS Kubernetes v1.7 and Docker 1.6 benchmarks (Levels 1 and 2), bringing 100+ controls for compliance and secure configuration.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
blog · xbow.com
MITRE ATT&CK Coverage Assessment: How to Measure Defensive Readiness
Most ATT&CK coverage heatmaps are built on assertion, not evidence. Here’s the methodology that makes numbers defensible, with the help of autonomous continuous testing.
blog · wiz.io
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
Back