Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

sysdig

Harden your LLM security with OWASP

Sep 19, 2024 By Nigel Douglas In Sysdig
Foundationally, the OWASP Top 10 for Large Language Model (LLMs) applications was designed to educate software developers, security architects, and other hands-on practitioners about how to harden LLM security and implement more secure AI workloads. The framework specifies the potential security risks associated with deploying and managing LLM applications by explicitly naming the most critical vulnerabilities seen in LLMs thus far and how to mitigate them.
Read Post
sysdig

Prioritize Security Without Sacrificing Productivity: Balancing Identity Management and Risk Tolerance

Sep 19, 2024 By Crystal Morin In Sysdig
In the fast-paced, large-scale world of digital business, establishing and managing an acceptable risk tolerance related to user identities — both human and machine — is a critical element of organizational security. At the forefront of this challenge is the need to strike the right balance between ensuring robust security and maintaining an environment that doesn’t impede innovation. After all, identities are the new perimeter in the cloud.
Read Post

Navigating Access Challenges in Kubernetes-Based Infrastructure

Sep 19, 2024 By Teleport In Teleport
Organizations often find that as they deploy their K8S infrastructure into production and across their company, what worked well for managing access during development does not scale efficiently. Research shows that this often leads to serious security risks including breaches. So, new access challenges emerge, particularly as teams scale. Join us for a 30-minute deep dive into how to secure access to Kubernetes-based environments including clusters, databases, and applications in a scalable way.
View Video
armo

CEL and Kubescape: transforming Kubernetes admission control

Sep 12, 2024 By Oshrat Nir In ARMO
Admission control is a crucial part of the Kubernetes security, enabling the approval or modification of API objects as they are submitted to the server. It allows administrators to enforce business logic or policies on what objects can be admitted into a cluster. Kubernetes RBAC is a scalable authorization mechanism, but lacks the fine grained control over different Kubernetes objects. This creates the need for another layer of control which is Admission Policies.
Read Post
sysdig

Enhancing CISO-Board communication: Three key questions for the CISO to answer

Sep 10, 2024 By Suresh Vasudevan In Sysdig
A challenging dynamic exists between the CISO and the Board of Directors. While both stakeholders focus on risk management, their approaches to risk and the language they use are notably different. Though regulations like the NIS2 directive and SEC cybersecurity disclosure rules have given CISOs a bigger seat at the table, the legal requirements and operational prioritization to meet them have exposed a difference in perspective and understanding between the two roles.
Read Post
tigera

What's New in Calico Cloud Summer 2024 Release

Sep 9, 2024 By Dhiraj Sehgal In Tigera
In the rapidly evolving world of container security, staying ahead of threats and keeping abreast of vulnerabilities is crucial. Calico Cloud continues to lead the way with new capabilities designed to enhance security posture, reduce noise, and improve operational efficiency for Security and DevOps teams. Here’s a comprehensive look at how these enhancements can impact your security posture and streamline your operations.
Read Post
sysdig

On-Prem and Kubernetes: A delicate relationship

Aug 30, 2024 By Sulav Kumar In Sysdig
In cloud security, context is everything. In the previous two installments of our Customers Care Chronicles, we wrote about how a security vendor needs to be a true business partner and the potential headaches when migrating tools in the cloud. In this installment, we tackle another non-security concept that happens to be crucial for security: environment.
Read Post
sysdig

Why identities are the new perimeter in the cloud

Aug 29, 2024 By Crystal Morin In Sysdig
In the ever-expanding world of cloud computing, one thing has become glaringly clear: identities are no longer just user profiles—they are the keys to the kingdom. As businesses race to harness the power of the cloud, they must also confront a growing menace: the risk posed by poorly managed identities. Imagine leaving your front door unlocked in a neighborhood known for break-ins — that’s what weak identity management is like in the cloud.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.