Magno Logan
14 articles
-
ResearchMitigating the Threat of Sidecar Container Injection
Although a legitimate approach, sidecar containers can add even more complexity to Kubernetes (K8s) clusters, not only making it harder to manage but also to detect compromises. This article demonstrates that attackers can leverage the sidecar injection technique after compromising a K8s cluster to remain stealthy and avoid detection, and how to protect K8s clusters from this malicious activity.
April 17th, 2024 8 minMagno Logan
Read article -
ResearchEnhancing Software Supply-Chain Security: Navigating SLSA Standards and the MITRE ATT&CK Framework
Attackers abuse different supply-chain scenarios to indirectly compromise organizations and applications. We delve into how a software pipeline works, where attacks could come from, and how to improve security.
January 31st, 2024 6 minMagno Logan
Read article -
ResearchUnderstanding the Kubernetes Security Triad: Image Scanning, Admission Controllers, and Runtime Security
Kubernetes, also known as K8s, is a very complex open-source platform that requires detailed attention to security. Despite previous efforts to increase its security, Kubernetes remains insecure by default and requires different security tools to protect the cluster.
November 21st, 2023 12 minMagno Logan
Read article -
ResearchA Deep Dive Into Kubernetes Threat Modeling
This report explores the aspects and considerations required to properly perform threat modeling within a Kubernetes environment, a piece of technology that many organizations worldwide rely on and a leading container orchestration platform.
October 31st, 2023 12 minMagno Logan
Read article -
BlogAbusing Argo CD, Helm, and Artifact Hub: An Analysis of Supply Chain Attacks in Cloud-Native Applications
We provide an overview of cloud-native tools and examine how cybercriminals can exploit their vulnerabilities to launch supply chain attacks.
May 5th, 2022 18 minMagno Logan
Read article -
ResearchGitHub Action Runners: Analyzing the Environment and Security in Action
More organizations are applying a DevOps thought-process and methodology to optimize software development. One of the main tools used in this process is a continuous integration (CI) tool, which automates the integration of code changes from multiple developers working on the same project.
January 18th, 2022 15 minMagno Logan
Read article -
BlogProtecting Your Krew: A Security Analysis of kubectl Plug-ins
We looked into the security of kubectl plug-ins in Krew and how supply chains' projects can be at risk.
November 16th, 2021 9 minMagno Logan
Read article -
ResearchMinding the Gaps: The State of Vulnerabilities in Cloud Native Applications
Our new report maps the vulnerable cracks in cloud native application security, and shows how this is a growing concern that enterprises should devote time and resources to secure.
October 8th, 2021 11 minMagno Logan
Read article -
ResearchLinux Threat Report 2021 1H: Linux Threats in the Cloud and Security Recommendations
Linux powers many cloud infrastructures today. However, it is not immune to threats and risks. We discuss several pressing security issues including malware and vulnerabilities that compromise Linux systems in the first half of 2021.
August 23rd, 2021 22 minMagno Logan, Pawan Kinger
Read article -
ResearchThe State of Ransomware: 2020’s Catch-22
Ransomware continues the trend of targeted attacks but with the added challenge of double extortion. Organizations need to be one step ahead of such coercive tactics to avoid potential disruptions, financial losses, and reputational damage.
February 3rd, 2021 17 minMagno Logan, Erika Mendoza, Ryan Maglaque, Nikko Tamaña
Read article -
ResearchA Look at Linux: Threats, Risks, and Recommendations
This article aims to discuss the Linux threat landscape and examine how Linux has become an attractive target for attackers, as well as how it can be prone to a variety of threats and risks.
January 26th, 2021 14 minMagno Logan, Pawan Kinger
Read article -
ResearchThe Basics of Keeping Kubernetes Clusters Secure
With Kubernetes’ popularity and high adoption rates, its security should always be prioritized. We provide vital tips and recommendations on keeping the master node, the API server, etcd, RBAC, and network policies secure.
October 14th, 2020 11 minMagno Logan
Read article -
BlogThe Basics of Keeping Kubernetes Cluster Secure: Worker Nodes and Related Components
We outline security mitigations and settings that should be prioritized in a clustered environment. The second part of our security guide on Kubernetes clusters covers best practices related to worker nodes, the kubelet, pods, and audit logs.
October 8th, 2020 11 minMagno Logan
Read article -
BlogSecuring the 4 Cs of Cloud-Native Systems: Cloud, Cluster, Container, and Code
Cloud-native security adopts the defense-in-depth approach and divides the security strategies utilized in cloud-native systems into four different layers: cloud, container, cluster, code.
May 27th, 2020 12 minMagno Logan
Read article