Engineering
XZ: A Case Study in Open-Source Supply Chain Attacks
CVE-2024-3094 is a CVSS 10.0 backdoor in XZ Utils 5.6.0 and 5.6.1. Downgrade to 5.4.6 or move to 5.6.2, then block affected images with a Kyverno policy.
6 min read
Category
News
57 posts · Page 2 of 5
Kyverno
A Proactive Approach to Address Windows Vulnerability (CVE-2023-5528) with Kyverno
Introduction Recently, Akamai's Tomer Peled announced a security threat to Kubernetes clusters, CVE-2023-5528. A user who can create pods and persistent volumes on…
1 min read
Engineering
Locked Doors, Untrusted Keys: Securing Containers in the Wake of Leaky Vessel Vulnerabilities
Leaky Vessels (CVE-2024-21626) lets a container reach the host filesystem through runc 1.1.11 and earlier. Patch to runc 1.1.12 and audit nodes with Kyverno.
7 min read
Engineering
Preventing “Sys:All” vulnerability from ruining your day
Google Kubernetes Engine (GKE) is a popular tool for managing containerized applications. However, a critical vulnerability has been discovered in GKE that could allow…
2 min read
Kyverno
Why & How Wayfair Migrated from OPA to Kyverno
This blog post summarizes the recent Kubecon presentation by Zach Swanson at Wayfair, in which he shared key insights and reasons for migrating to Kyverno.
2 min read
Engineering
Mitigating the Latest Kubernetes NGINX Ingress Controller CVEs
Ingress users can steal ingress-nginx credentials via CVE-2023-5043, CVE-2023-5044 and CVE-2022-4886. Upgrade to v1.9.0 and block the annotations with Kyverno.
3 min read
Events
Kubernetes Automation, Policy, and Governance Crossed the Chasm at KubeCon North America 2022
KubeCon + CloudNativeCon NA 2022 brought many firsts and advancements on the importance of policies, automation and governance for Kubernetes clusters.
5 min read
Events
Kubernetes Policy, Security and Governance with Nirmata at KubeCon North America 2022
Nirmata is at KubeCon North America 2022! Come and meet us and learn more about Kyverno and our DevSecOps solutions for Kubernetes governance, management, security and…
3 min read
News
CNCF Moves Kyverno from Sandbox to Incubating Project
As Kyverno approaches its 2nd birthday, Nirmata marks this significant milestone with the exciting news that the project has moved from sandbox to incubating status!
3 min read
News
Securing and Managing Amazon EKS-A Bare Metal using Nirmata
In this post, Nirmata discusses how to deliver consistent hybrid cloud Kubernetes with Amazon EKS-A Bare Metal. Read on here!
2 min read
News
Nirmata Achieves Significant Growth led by Customer Wins, Partner Ecosystem and Record-Breaking Adoption of the Open-Source Project Kyverno, with over 200M Downloads
Nirmata, the software solutions provider for policy-based security and automation, announced milestones and is building momentum with over 200 million Kyverno downloads…
4 min read
News
Nirmata Achieves Container Competency Partner Status from AWS
The Nirmata DevSecOps Platform works with AWS to provide additional security capabilities for containerization and Kubernetes workloads. Nirmata helps with AWS…
2 min read