Effective Strategies for Open Source Supply Chain Management

Reckoning with the Human Factor in Observability

DID You Hear? Decentralized Identifiers Are Coming

#InfoSecBikini and #DevsPelades: A Movement to Bring Your Whole Self to Tech

Securing Istio Workloads with Auth0

Data Access Management with ACEs vs. ACLs: The Power of ‘AND’ and ‘NOT’

Composing Effective Consumer Onboarding Workflows, Part 1

Cloud Native Security Shifts the Focus Back to the Application

4 Key Priorities for Automating Application Security

Living with Kubernetes: Multicluster Management

DevSecOps: Why Security Shouldn’t be Sacrificed for Speed

Virtual Clusters are the Future of Kubernetes Multitenancy

Splunk Brings Its Security Service to the Cloud

Secure Microservices in Ways That Developers Like

Secrets Management: Doppler or HashiCorp Vault?

Red Hat: Human Error a Leading Cause of Kubernetes Security Mishaps

Resilience Is an R&D Problem, Not Just an SRE Problem

The Architectural Challenge of Authorization

Why the Security Industry Has Workload Protection All Wrong

Sonatype Lift, a Deep Code Analysis Platform

Kubernetes: An Examination of Major Attacks

How to Set up a Secure Test Environment with an Offsite Team

SwampUP: DevOps Needs Guardrails, Not Gates, for Security

VMware Redefines Security After a Surge in Attacks

Preflight Defends Against Supply Chain Attacks with Single Line of Code

Securing Pipelines Through Secrets Management

Anchore: Scan Your Container Images for Vulnerabilities from the Command Line

Keeping up with the Hare: Establishing a DevSec Culture

Checking the Linux Kernel with Static Analysis Tools

JFrog Platform ‘Crypto-Signs’ Binaries for Zero-Trust Software Lifecycle Management

Applying Kubernetes Security Best Practices to Helm Charts

Engineering Solutions to Security Issues

Ransomware: How the Kasten K8s Storage Platform Overcomes the Ultimate Data Replication Challenge

Create and Manage SSH Keys for Third-Party Integration

Israeli Cybersecurity Sector Flourishes

Cycode Tests Code Security for Entire Software Lifecycle

Mitre ATT&CK Frameworks Get a Handle on Kubernetes Security Defense

Tips For Monitoring the Secure Edge for App Performance

Snyk’s FossID Buy to Boost C++ Compliance for Embedded Devs

Sysdig Offers a Real-Time Security Look into AWS’ Fargate Serverless Containers

Developers Just Want to Know if They Have a Problem

Expanding Cyber Defense Through AI and ML

Supply Chain Attacks and Cloud Native: What You Need to Know

Reasons to Implement HashiCorp Vault and Other Zero Trust Tools

How AppSec Can Keep up with Increases in Release Frequency

Shell-less Kubernetes: Talos Systems Introduces the Common Operating System Interface

Kyverno Defends Containers Against Security Configuration Errors

Remembering Dan Kaminsky

Security Insights into Infrastructure-as-Code

Misconfiguration Worries Grow

Governance, Risk and Compliance with Kubernetes

HashiCorp Releases HCP Vault to Combat ‘Secrets Management’ Fatigue

Checkov 2.0: Context-Aware Security Scanning for Infrastructure as Code

This Week in Programming: Microsoft Gets Rusty

Rustls Looks to Provide a Memory-Safe Replacement for OpenSSL

University of Minnesota Researchers Tried to Poison the Linux Kernel