Container Security
-
Cloud Security
Your Container Image Contains a Package Manager an Attacker Can Use
A full base image ships a shell, a package manager and hundreds of libraries your application never calls, and all…
Read More » -
Cloud Security
Kubernetes RBAC Grants More Than Its Verbs Suggest
Permission to read secrets in a namespace is obvious. Permission to create pods in that namespace grants the same access…
Read More » -
Cloud Security
Container Scanning Passes, Runtime Fails: Closing the Gap
A clean image scan says nothing about what a container does once running. Most container compromises exploit runtime configuration rather…
Read More »