Container Vulnerability Scanning: Finding the Issues That Actually Ship

Part two of Wiz's eBPF series: kernel-level observability answers real security questions—container escape attempts, RCE via non-standard sockets, /etc/shadow access—to harden Kubernetes workloads.

A guide to enterprise GitLab rollouts comparing GitLab.com, Dedicated, and self-managed models, with planning guidance for runners, availability, disaster recovery, and pipeline performance at scale.

Unlike VMs, containers share the host kernel, so isolation alone isn't enough. The guide breaks down four layers—image, registry, runtime, and orchestrator—with practical steps to secure each.

JFrog launches Runtime Scope: every cluster and image actually running in production is automatically scanned by Xray and Advanced Security — no manual lists, no coverage gaps.

Wiz Research details an evolved DERO cryptojacking campaign abusing anonymous-access Kubernetes clusters to deploy UPX-packed miners from Docker Hub images, plus updated TTPs and IoCs.

Wiz maps its Kubernetes security approach to the OWASP Kubernetes Top 10, combining agentless visibility, shift-left controls and real-time runtime detection with actionable remediation.