Container Security

figo Converts to Container Infrastructure for Speed, Efficiency and Scalability

Building in Reliability to Meet Regulatory Demands The German banking service provider figo is on a mission to reduce complexity and increase reliability and scalability across its infrastructure. To reach these goals, while also addressing the ongoing demands of banking and privacy regulations, figo is converting to a Kubernetes container-based infrastructure. As figo says, “these… Read more »

Docker Security

Alpine Linux Docker Image Vulnerability CVE-2019-5021

Attackers can login to root with no password on affected systems On May 8, 2019, a potentially serious vulnerability was announced affecting the Docker Alpine Linux container image. The vulnerability allows an attacker to authenticate as the root user with no password if using Linux PAM or other authentication means. Potentially thousands of downloads of… Read more »

Article, Container Security

NeuVector Announces New Container Risk Reports for Vulnerability Exploits, External Attacks, and East-West Connections

New dashboard and reports enable DevOps security teams to accurately assess their attack risk, and offer recommendations to reduce risk for Kubernetes and Red Hat OpenShift deployment San Jose, CA – May 7, 2019 – NeuVector, the leader in container network security, today announced new capabilities to help container security teams better assess the security… Read more »

Container Security

What Is Complete Run-Time Container Security?

By Gary Duan Securing containers in production is no easy task. And getting it wrong or deploying weak run-time container security will ultimately leave you vulnerable to an attack. It would only be a matter of time before you will be scrambling to recover and possibly facing bad publicity from a data breach. Run-time container… Read more »

Cloud Security

Runtime Security for Knative, a Kubernetes Based Serverless Computing Platform

By Fei Huang What is Serverless? The nature of a serverless computing framework is to abstract applications at much higher level to provide portability, resource utilization and cost benefits. For example delivering API level or function level code that can run only when needed. Ideally, after developers have checked in code, a serverless computing framework… Read more »