Kubernetes
Compliance Operations: Making Kubernetes Audit-Ready by Design
The post Compliance Operations: Making Kubernetes Audit-Ready by Design appeared first on Anchore.The era of “point-in-time” compliance is over as we already covered in our post from October last year (Compliance Isn’t ...
Use of XMRig Cryptominer by Threat Actors Expanding: Expel
Security researchers last year wrote about a surge in the use by threat actors of the legitimate XMRig cryptominer, and cybersecurity firm Expel is now outlining the widening number of malicious ways ...
RCE Vulnerability in React Server Components & Next.js | Uptycs
Post by Uptycs MDR Team Contributed by: Nandakumar KJ & Nageswra Rao C Technical Details: A critical vulnerability has been discovered in the React Server Components (RSC) 'Flight' protocol, impacting on the ...
Securing Agentic AI: Extending Network Security Principles to Serverless Environments
As enterprise AI rapidly matures, we’re entering a new phase, one powered by agentic AI. These intelligent agents are more autonomous, capable of making decisions, taking actions, and adapting dynamically to new ...
Uptycs CNAPP for IBM Cloud | Unified Hybrid Exposure Management
As organizations expand into hybrid and multicloud environments, one challenge becomes clear: maintaining consistent visibility and control across diverse cloud infrastructures. At Uptycs, we’ve solved this for AWS, Azure and GCP. Now ...
Security Debt Is Worse Than Tech Debt — and Twice as Invisible
Security Debt Is Worse Than Tech Debt — and Twice as Invisible We talk about tech debt like it’s a necessary evil. Move fast, break things, fix it later. Everyone’s cool with ...
Open Source and foreign influence, should we panic?
Updated 2025-09-08 to add notes about the similar fast-glob package. Wired recently published an article titled Security Researchers Warn a Widely Used Open Source Tool Poses a ‘Persistent’ Risk to the US ...
MCP, OAuth 2.1, PKCE, and the Future of AI Authorization
6 min readThe MCP authorization spec sets a new standard for securing non-human AI agents – with lessons for anyone building autonomous, scalable systems. The post MCP, OAuth 2.1, PKCE, and the ...
Kubernetes Ingress-nginx Remote Code Execution Vulnerability (CVE-2025-1974)
Overview Recently, NSFOCUS CERT detected that Kubernetes issued a security announcement and fixed the Kubernetes Ingress-nginx remote code execution vulnerability (CVE-2025-1974). The Ingress controller deployed in Kubernetes Pod can be accessed through ...
Aembit Non-Human IAM Connects Cloud-Native and VM Environments
5 min readOur latest update enables secure, seamless connectivity for workloads across cloud and Kubernetes, without trust domain restrictions. The post Aembit Non-Human IAM Connects Cloud-Native and VM Environments appeared first on ...
