Application Security Weekly Subscribe

Making Kubernetes a Hostile Place for Attackers – Brad Geesaman – ASW #103

April 13, 2020

Kubernetes is conceptually simple, but in practical terms, a highly complex distributed system with thousands of interdependent settings that drive behavior and security posture. That said, focusing hardening efforts on a handful of key configurations and policies can make the job of an attacker incredibly challenging in a cluster.

Full episode and show notes

Guest

Brad Geesaman

Brad Geesaman

Co-Founder at Darkbit

Brad Geesaman is a co-founder of Darkbit.io helping clients improve the security of their Kubernetes clusters in cloud-native environments. When he’s not educating others on the security risks inherent in complex distributed systems, he enjoys spending time with his family in Virginia, eating Mexican food, and collecting an impractical amount of ebooks.

Hosts

Mike Shema

Mike Shema

Tech Lead at Block

John Kinsella

John Kinsella

Co-founder & CTO at Cysense

Matt Alderman

Matt Alderman

VP, Product at Living Security

Related

Security awareness

What We’ve Learned From Interviewing Cybercriminals – Adam Janofsky – ESW Vault

June 2, 2023

Check out this interview from the ESW VAULT, hand picked by main host Adrian Sanabria! This segment was originally published on October 21, 2021. The Record has published several interviews with cybercriminals, courtesy The Record's Russian-speaking analyst, Dmitry Smilyanets (https://therecord.media/author/dmitry-smilyanets). These interviews hav...

Career Ladders In Information Security – Marc French – BSW Vault

May 31, 2023

Check out this interview from the BSW VAULT, hand picked by main host Matt Alderman! This segment was originally published on June 8, 2020. Marc French has more than 25 years of technology experience in engineering, operations, product management, and security. Prior to his current role at CISO at Product Security Group, Marc was the SVP & Chi...

Vulnerability management

Plain Text Keystrokes, WPBT, One Packet Exploits, & Sock Puppets! – PSW #787

May 31, 2023

In the security news: keystroke logs are stored in plain-text (and other atrocities in software used in schools), WPBT is the gift that keeps on giving and this time it's Gigabyte, PCI DSS 4.0 (drink!), immutable linux desktops, one packet exploits, neat linux malware, sock puppets, a must read new book about hacks, why SMB why?, boot girls, exposi...