tutorial

Docker Hub Breach: What to Do Now

Last week, it was disclosed that a breach had occurred in the Docker Hub repository for container images. In an email to customers, Kent Lamb, director of Docker Support, wrote: “During a ...

Wei Lien Dang | May 1, 2019 | best practices, container, container images, docker hub, kubernetes, tutorial

TechStrong TV – Live

Click full-screen to enable volume control

Watch latest episodes and shows

SUBSCRIBE TO CJ NEWSLETTER

Red Hat Extends OpenShift Platform Plus Environment

August 16, 2022 Mike Vizard 0

The NSA Wants the Network Locked Down

August 16, 2022 Robert Brennan 0

Uncategorized

Techstrong TV: The Need for Dapr

August 12, 2022 Alan Shimel 0

Container Ecosystems Container Security Topics

Techstrong TV: Making Building Container Applications Simpler

August 11, 2022 Mike Vizard 0

Container Security Features Topics

Aqua Security Finds New Cryptojacking Technique

August 11, 2022 Mike Vizard 0

UPCOMING WEBINARS

DevOps.com
Security Boulevard

Observability, Monitoring and Analytics

12 September 2022

Observability aims to make it easier to identify IT issues before they cause a disruption by combining metrics, logs and traces from a wide range of DevOps tools and platforms. Historically, DevOps teams focused on continuous monitoring as the most effective way to proactively manage application environments, but it can still take days or weeks […] The post Observability, Monitoring and Analytics appeared first on DevOps.com. [...]

Open Source Project Goldilocks: How to Right-Size Kubernetes

8 September 2022

Getting resource requests and limits just right is an ongoing challenge for most organizations. The Fairwinds’ open source tool, Goldilocks, is a utility that can help you identify a starting point for resource requests and limits. Using Goldilocks, you can more easily right-size Kubernetes across multiple clusters and multiple teams. In this webinar, we’ll provide […] The post Open Source Project Goldilocks: How to Right-Size Kubernetes appeared first on DevOps.com. [...]

Security and Assurance for AWS Fargate Containers: A How-To Session

8 September 2022

Containers-as-a-service, like AWS Fargate, have proven to be a valuable mechanism for DevOps teams to build and deploy complex applications at scale. By removing the need for infrastructure management and security, customers can also streamline their deployment using AWS Fargate with Amazon EKS. However, customers are still responsible for Fargate container runtime security and for […] The post Security and Assurance for AWS Fargate Containers: A How-To Session appeared first on DevOps.com. [...]

Market Research: The Surprising Cost of On-Call Operations

7 September 2022

Data and insights from over 300 on-call practitioners, managers and executives revealed some surprising data on the cost of on-call, it’s biggest drivers and key recommendations for reducing costs while improving the customer experience. Anyone responsible for operations or reliability should attend this session to gather benchmark data, learn about the cost drivers for on-call […] The post Market Research: The Surprising Cost of On-Call Operations appeared first on DevOps.com. [...]

DevOps Unbound: Report on AI-Augmented DevOps

30 August 2022

Do DevOps teams see AI’s potential in their development pipelines? If so, where do they expect the most significant impact? Are there differences in value expectations from AI-infused DevOps based on DevOps maturity level or geographic region? Those questions and more are part of a new study from Techstrong Research: AI-Augmented DevOps: The Next Frontier. […] The post DevOps Unbound: Report on AI-Augmented DevOps appeared first on DevOps.com. [...]

Identity Zero-Trust: From Vision to Practical Implementation

19 September 2022

Since its emergence almost a decade ago, zero-trust has been commonly associated with rebuilding networking infrastructure security. Silverfort challenges this approach and enables organizations to implement an end-to-end zero-trust architecture at the identity control plane by monitoring and enforcing active access policies on any user, system and environment, both on-premises and in the cloud. In.. The post Identity Zero-Trust: From Vision to Practical Implementation appeared first on Security Boulevard. [...]

CISO Talk Master Class Episode: Catch Lightning in a Bottle – The Essentials: Bringing It All Together

30 August 2022

Join the CISO Talk Master Class live conversation. Part 6 brings all the elements into a cohesive, integrated strategy: continuous security strategy, leveraging frameworks, effective response strategies, growing next-gen security experts and communications that win and combat confusion. Join hosts Mitch Ashley and Mat Newfield and an elite panel of cybersecurity experts as they bring.. The post CISO Talk Master Class Episode: Catch Lightning in a Bottle – The Essentials: Bringing It All Together appeared first on Security Boulevard. [...]

Implementing Identity Access Prioritization and Risk-Based Alerting for High-Fidelity Alerts

24 August 2022

Traditional security monitoring architecture is plagued with data silos, performance issues and delays in retrieving archived data—and has been haunting security teams for years. Many analysts that continue to operate with an antiquated SIEM architecture stack also experience a high volume of alerts—with many false positives. Luckily, the internal security team at Snowflake found a.. The post Implementing Identity Access Prioritization and Risk-Based Alerting for High-Fidelity Alerts appeared first on Security Boulevard. [...]

API Security

22 August 2022

Join us as we explore the rapidly evolving application and API landscape and offer concrete ways organizations can protect against threats to their application code, APIs and related components. The post API Security appeared first on Security Boulevard. [...]

Code Tampering: Four Keys to Pipeline Integrity

17 August 2022

This webinar examines code tampering risks, shares lessons learned from recent incidents and proposes a four-pillar approach to reducing code tampering risk through: Integrity validation: Confirming files and artifacts across each phase of the SDLC Anomaly detection: Connecting dots from disparate systems to identify breaches Critical code monitoring: Determining which code to monitor for any.. The post Code Tampering: Four Keys to Pipeline Integrity appeared first on Security Boulevard. [...]

tutorial

Docker Hub Breach: What to Do Now

Implementing Zero-Trust on Kubernetes

Securing Containers At Scale

1 Billion Flux Downloads Show GitOps Gaining Ground

3 Cloud-Native Database Tools From CNCF

Using Kubernetes to Secure Data