Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
With many approaches to honing your skills and broadening your knowledge, next month's virtual Black Hat USA events can help enhance your skills — there will be a broad spectrum of in-depth cybersecurity Briefings and Trainings.
If you're interested in efficiently leveling up your understanding of Kubernetes security, for example, attend Defending Containers Like a Ninja: A Walk Through the Advanced Security Features of Docker & Kubernetes. This 40-minute Briefing will give you expert advice on how to implement advanced security features to secure the Docker daemon and its core components in Swarm and Kubernetes-orchestrated environments. Plus, you'll learn various attacks that could be carried out if these advanced security measures aren't applied.
For more in-depth instruction, sign up for the Kubernetes Security Masterclass, a two-day Training at Black Hat USA that will familiarize you with the depths of Kubernetes security. You'll start by setting up and running your own Kubernetes clusters on a simulated "on-prem" environment.
This opportunity will confirm that you understand the intrinsic aspects of the cluster and underlying technology without blindly depending on managed cloud providers to secure them. Once you're set up, the Training will take you through in-depth instruction in attacking and defending Kubernetes clusters; you'll learn all about Kubernetes attacker playbooks, and walk away with some useful techniques, tips, and tools you can use to audit and defend your own Kubernetes clusters.
And at this year's virtual Black Hat USA Arsenal, you can catch live demos and chat with vendors knowledgeable about leading security products. To complement your focus on Kubernetes, stop by to learn more about tools like KubiScan. Created to search for risky pods that contain privileged service account tokens that can be used for privilege escalation, or even compromising a Kubernetes cluster, this tool can also show you all the risky roles, rolebindings, users, and privileged pods in the Kubernetes cluster.
Register now for this year's fully virtual Black Hat USA, still scheduled to take place August 1–6, and get more information about the event on the Black Hat website.
The 10 Most Impactful Types of Vulnerabilities for Enterprises TodayManaging system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Tweet This
1 Comments
