How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
Get Started

Runtime Protection for K8s Workloads Using a Mutating Admission Controller

Aqua Cloud Native Blog \ Categories: KUBERNETES SECURITY

KUBERNETES SECURITY
Runtime Protection for K8s Workloads Using a Mutating Admission Controller
Although Kubernetes has certainly matured into a well-adopted container orchestrator platform, it remains complex to manage and secure. Coupling this with a growing attack surface and bad actors trying to exploit it, organizations must implement a comprehensive approach to securing their K8s applications. Aqua aims to tame the complexity of securing K8s-based applications by leveraging …
Read more
KUBERNETES SECURITY
Taking Advantage of Object Labels while Controlling the Human Factor
The use of object labels has grown into an industry best practice, as labels allow you to apply metadata to objects like images, deployments, containers, volumes, networks, and more. They can be short and technical, but they can also be more descriptive. However, even with the use of automation for creating labels, although effective, it …
Read more
Aqua Trivy, KUBERNETES SECURITY
Automating Kubernetes Security Reporting with Starboard Operator by Aqua
Back in June 2020, we released Starboard – an open source toolkit that integrates security tools into a Kubernetes environment. We’re now happy to announce a new Starboard Operator that automates the generation of security reports in your K8s cluster. Using Starboard Operator, you can rely on the tools you’re already familiar with, like kubectl, …
Read more
KUBERNETES SECURITY
Introducing KSPM by Aqua: Kubernetes Security Posture Management
With the rapid adoption of Kubernetes, an unforeseen consequence has emerged — there simply aren’t enough trained K8s experts to go around, let alone K8s security experts. Kubernetes environments have increased in size and complexity, expanding its attack surface, and ultimately heightening its susceptibility to exploitation. Given that the configuration of K8s involves many different …
Read more
KUBERNETES SECURITY
Kube-Query: A Simpler Way to Query Your Kubernetes Clusters
osquery is a SQL powered operating system instrumentation, monitoring, and analytics tool that exposes an operating system as a relational database. Using SQL, you can run queries to gain the status of your entire infrastructure. What’s cool about osquery is how easy it is to use the SQL query interface. kube-query is an open source reporting …
Read more
KUBERNETES SECURITY
Impressions from KubeSec, Our Third Enterprise Summit for K8s Security
Yesterday more than 300 cloud native professionals assembled for KubeSec, what has now become a fixture as a “day zero” event for KubeCon/CloudNativeCon. As with previous events, the emphasis was on end-user organizations’ experiences in securing production environments. While many technical aspects and best practices were covered, this year a recurring theme was tackling the …
Read more
KUBERNETES SECURITY
Securing Hybrid Cloud Workloads on Google Anthos
There are major shifts happening around container technology. We have seen ongoing improvements in automation tooling and changes as fully containerized workloads move into production. Companies are often running more than one production Kubernetes cluster at a time.  DevOps and operations teams, subsequently, have an additional burden because they must control and manage these clusters, …
Read more
KUBERNETES SECURITY
Kubernetes RBAC: Asking for Forgiveness or Getting Permission
This blog is dedicated to my Mum. She was a leading psychiatrist who loved learning and traveling. She was a huge inspiration to me. I think she would be proud that I’m pursuing my passion of traveling around the world teaching what I love. I want to start with a quote attributed to another inspiring …
Read more
KUBERNETES SECURITY
Aqua Operator: Automating Security for Kubernetes
Aqua recently developed a Kubernetes Operator that was successfully tested and validated by Red Hat standards for integration and supportability. Before we tell you about our new OpenShift-certified Operator, let’s get some context about what an Operator is.
Read more
KUBERNETES SECURITY
Security Configuration Benchmarks for Kubernetes
When you’re running Kubernetes, how do you know whether it’s configured securely? Kubernetes is a complex system, with several control plane components, each of which has numerous configuration parameters. In some cases, it’s clear that a parameter will have an impact on Kubernetes security – for example, providing keys and certificates for setting up secure …
Read more
KUBERNETES SECURITY
Istio: Canary Deployments, Dynamic Routing & Tracing
In this series of blog posts we had an introduction to Istio, and an overview of its security features. This post completes the series with a look at how we can leverage Istio’s traffic control features to provide increased observability and control over the operation and deployment of our applications.
Read more
KUBERNETES SECURITY
Istio Security: Zero-Trust Networking
This is the second in our series of blog posts on Istio, and will focus on Istio’s security features: what they are, how they work and how they help protect your workloads and your data. Building, deploying and maintaining secure, cloud native software requires multiple overlapping solutions at different stages of the software development lifecycle. …
Read more
Page 3 of 4‹ Prev1234Next ›
Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo