PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

From Posture to Runtime: A Unified Approach to OpenShift Security

wiz.io | blog | #cloud | #kubernetes | #compliance | #container-security | #runtime-security | #posture-management | #openshift
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A unified OpenShift security lifecycle - mapping Kubernetes and cloud relationships, validating posture, blocking insecure workloads, detecting runtime threats - feeding the Wiz Security Graph.
Published
Collected

Related coverage

blog · wiz.io
Unveiling eBPF: Harnessing Its Power to Solve Real-World Issues
Part two of Wiz's eBPF series: kernel-level observability answers real security questions—container escape attempts, RCE via non-standard sockets, /etc/shadow access—to harden Kubernetes workloads.
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
blog · wiz.io
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
blog · wiz.io
NamespaceHound: protecting multi-tenant K8s clusters
Wiz releases NamespaceHound, an open-source tool that detects risky namespace-crossing violations and anonymous access in multi-tenant Kubernetes clusters to harden tenant isolation.
blog · wiz.io
Announcing the Release of "Kubernetes Security for Dummies"
Wiz and Wiley release 'Kubernetes Security for Dummies,' covering cloud-native fundamentals, cluster hardening, container security, compliance automation and ten best practices.
blog · wiz.io
Key takeaways from the Wiz 2023 Kubernetes Security Report
Highlights from Wiz's 2023 Kubernetes Security Report, based on 200,000+ scanned cloud accounts: new clusters face malicious scans within 22 minutes, kubelet endpoints sit exposed, cryptomining rises.
Back