How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
Get Started

Starboard: The Kubernetes-Native Toolkit for Unifying Security

Aqua Cloud Native Blog \ Tags: Kubernetes Security

Aqua Trivy
Starboard: The Kubernetes-Native Toolkit for Unifying Security
There are lots of security tools in the cloud native world, created by Aqua and by others, for identifying and informing users about security issues in Kubernetes environments. However powerful and useful they might be, they tend to sit alongside Kubernetes, with each new product requiring users to learn a separate set of commands and …
Read more
KUBERNETES SECURITY
Kube-Query: A Simpler Way to Query Your Kubernetes Clusters
osquery is a SQL powered operating system instrumentation, monitoring, and analytics tool that exposes an operating system as a relational database. Using SQL, you can run queries to gain the status of your entire infrastructure. What’s cool about osquery is how easy it is to use the SQL query interface. kube-query is an open source reporting …
Read more
KUBERNETES SECURITY
Impressions from KubeSec, Our Third Enterprise Summit for K8s Security
Yesterday more than 300 cloud native professionals assembled for KubeSec, what has now become a fixture as a “day zero” event for KubeCon/CloudNativeCon. As with previous events, the emphasis was on end-user organizations’ experiences in securing production environments. While many technical aspects and best practices were covered, this year a recurring theme was tackling the …
Read more
SECURITY RESEARCH
DNS Spoofing on Kubernetes Clusters
In this post I’ll describe how an attacker, who manages to run malicious code on a cluster can, with no special permissive permissions, successfully spoof DNS responses to all the applications running on the cluster, and from there execute a MITM (Man In The Middle) on all network traffic of pods.
Read more
SECURITY RESEARCH
Kubernetes Pod Escape Using Log Mounts
Kubernetes has many moving parts, and sometimes combining them in certain ways can create unexpected security flaws. In this post you’ll see how a pod running as root and with a mount point to the node’s /var/log directory can expose the entire contents of its host filesystem to any user who has access to its …
Read more
KUBERNETES SECURITY
Securing Hybrid Cloud Workloads on Google Anthos
There are major shifts happening around container technology. We have seen ongoing improvements in automation tooling and changes as fully containerized workloads move into production. Companies are often running more than one production Kubernetes cluster at a time.  DevOps and operations teams, subsequently, have an additional burden because they must control and manage these clusters, …
Read more
SECURITY RESEARCH
CVE-2019-11246: Another kubectl Path Traversal Vulnerability Disclosed
A new vulnerability (CVE-2019-11246) was disclosed that enables path traversal in kubectl, the popular command line interface for running commands on Kubernetes clusters. What’s interesting about this CVE is that we’ve already seen two previous variations of the same vulnerability disclosed and patched. Read on to learn how that happened.
Read more
KUBERNETES SECURITY
Kubernetes RBAC: Asking for Forgiveness or Getting Permission
This blog is dedicated to my Mum. She was a leading psychiatrist who loved learning and traveling. She was a huge inspiration to me. I think she would be proud that I’m pursuing my passion of traveling around the world teaching what I love. I want to start with a quote attributed to another inspiring …
Read more
KUBERNETES SECURITY
Aqua Operator: Automating Security for Kubernetes
Aqua recently developed a Kubernetes Operator that was successfully tested and validated by Red Hat standards for integration and supportability. Before we tell you about our new OpenShift-certified Operator, let’s get some context about what an Operator is.
Read more
SERVERLESS SECURITY
Knative: The Serverless Environment for Kubernetes Fans
Knative is the newest member of serverless environments that is gaining significant interest and generating a great deal of hype in the Kubernetes/Cloud Native community. It’s an open source framework that was designed to enable the development and deployment of container-based serverless applications that are easy to transport between cloud providers.
Read more
KUBERNETES SECURITY
Security Configuration Benchmarks for Kubernetes
When you’re running Kubernetes, how do you know whether it’s configured securely? Kubernetes is a complex system, with several control plane components, each of which has numerous configuration parameters. In some cases, it’s clear that a parameter will have an impact on Kubernetes security – for example, providing keys and certificates for setting up secure …
Read more
KUBERNETES SECURITY
Istio: Canary Deployments, Dynamic Routing & Tracing
In this series of blog posts we had an introduction to Istio, and an overview of its security features. This post completes the series with a look at how we can leverage Istio’s traffic control features to provide increased observability and control over the operation and deployment of our applications.
Read more
Page 5 of 7‹ Prev1234567Next ›
Need to secure enterprise workloads?

Aqua Cloud Native Application Protection Platform (CNAPP)

Go cloud native with the experts!

Get Demo