Application Security Weekly Subscribe

DevSecOps, Application security

Kubernetes, Container and Cloud Best Practices for Securing Cloud Apps and Hardening – Kong Yew Chan – ASW #217

October 24, 2022

Learn what keeps DevOps and SecOps up at night when securing Kubernetes, container, and cloud native applications, what tactics are best for developers and application architects to consider when securing your latest cloud application and hardening your CI/CD pipeline and processes. This segment is sponsored by Qualys. Visit https://securityweekly.com/qualys to learn more about them!

Sponsored By

Full episode and show notes

Announcements

Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

Guest

Kong Yew Chan

Kong Yew Chan

Director of Product Management at Qualys

Kong Yew Chan is director of product management at Qualys. In this role, Kong covers enterprise platform including data, infrastructure, security and compliance. He has more than 10 years of product experience in enterprise software covering data, multi-tenancy and encryption.

Hosts

Mike Shema

Mike Shema

Tech Lead at Block

John Kinsella

John Kinsella

Co-founder & CTO at Cysense

Related

Application security

Equifax’s Breach, CISA’s 1,000 Vulns, Rust’s TLS Library, Complexity vs. Design – ASW #256

September 25, 2023

A stroll back through the Apache Struts breach of Equifax, CISA's list of Known Exploited Vulnerabilities, Rust's replacement for OpenSSL, Go no longer throws programmers for a loop, complexity vs. design (that leads to better security).

Application security

Supply Chain Security Security with Containers and CI/CD Systems – Kirsten Newcomer – ASW #256

September 25, 2023

Supply chain has been a hot topic for a few years now, but so many things we need to do for a secure supply chain aren't new at all. We'll cover SBOMs, vuln management, and putting together a secure pipeline. Segment resources: https://www.solarwinds.com/assets/solarwinds/swresources/whitepaper/2111swiwhitepaper_nextgenbuild.pdf https://next.red...

Application security

Azure’s Eight XSS Vulns, CNCF’s Two Security Audits, CISA’s OSS Roadmap, Repojacking – ASW #255

September 18, 2023

A slew of XSS in Azure's HDInsights, CNCF releases fuzzing and security audits on Kyverno and Dragonfly2, CISA shares a roadmap for security open source software, race conditions and repojacking in GitHub, and more!