Product

Locked Doors, Untrusted Keys: Securing Containers in the Wake of Leaky Vessel Vulnerabilities

The recent buzz surrounding the actively exploited runc vulnerabilities “Leaky Vessels”  (CVE-2024-21626) serves as a timely reminder of two essential container security principles: image trust and comprehensive patching. Let’s delve into why these aspects are crucial for your containerized environments. Trustworthy Images are Foundational: It…

0

Mitigating the Latest Kubernetes NGINX Ingress Controller CVEs

Recently, a few new vulnerabilities for Kubernetes Nginx Ingress controllers have made their way across industry channels, showcasing how much of a challenge securely configuring Kubernetes can be. The vulnerabilities, tracked as CVE-2023-5043, CVE-2023-5044 and CVE-2022-4886, were disclosed on October 27, and are listed as…

0

Nirmata Policy Manager Empowers Platform Engineering Teams To Deliver Secure and Compliant Kubernetes Governance

Nirmata Policy Manager (NPM), powered by the widely adopted open-source CNCF policy engine – Kyverno, enables platform engineering teams to enforce security, compliance, governance, and automation policies across Kubernetes clusters and workloads. At the recent CloudNativeSecurityCon in Seattle, the lack of security policies was discussed…

0