Given the mind-boggling rate of innovation and adoption of cloud native technologies, and with the start of 2021, the Terrascan team at Accurics has resolved to help cloud native development teams identify and mitigate more vulnerabilities in the new year. Terrascan provides a great platform for this, since it is easy to integrate policy as …
Kubernetes security, as stated in earlier blogs, is complex to manage and needs a holistic security approach. One of these approaches that can help shift security left is to use policy as code tools like Terrascan. Ever since Terrascan gained the ability to scan k8s configurations, we have been actively looking for the latest vulnerabilities …
Kubernetes Security: Stop Blind SSRF with Policy as Code (CVE-2020-8555) Read More »
Kubernetes security is complex to manage and is constantly changing. In our last blog, we addressed how a security vulnerability related to the Kubernetes snapshot controller can be proactively mitigated using policy as code. This time we discuss a different vulnerability covered in this issue, which describes how an adversary can intercept traffic in a …
Kubernetes security: preventing man in the middle with policy as code Read More »
Digital transformation and cloud migration have been top of mind for most organizations over the past few years, given the competitive and economic pressures faced by all industries. Established business models and security processes continue to be disrupted, leading to not only technical challenges but identity crises and lots of soul searching. The arrival …
Self-healing Cloud Infrastructure for Tomorrow’s Applications Read More »
Get the latest posts in your inbox
