Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

jfrog

Chaotic Deputy: Critical vulnerabilities in Chaos Mesh lead to Kubernetes cluster takeover

Sep 16, 2025 By Natan Nehorai In JFrog
JFrog Security Research recently discovered and disclosed multiple CVEs in the highly popular Chaos engineering platform – Chaos-Mesh. The discovered CVEs, which we’ve named Chaotic Deputy are CVE-2025-59358, CVE-2025-59360, CVE-2025-59361 and CVE-2025-59359. The last three Chaotic Deputy CVEs are critical severity (CVSS 9.8) vulnerabilities which can be easily exploited by in-cluster attackers to run arbitrary code on any pod in the cluster, even in the default configuration of Chaos-Mesh.
Read Post
tigera

Securing AI Workloads in Kubernetes: Why Traditional Network Security Isn't Enough

Sep 11, 2025 By John Alexander In Tigera
The AI revolution is here, and it’s running on Kubernetes. From fraud detection systems to generative AI platforms, AI-powered applications are no longer experimental projects; they’re mission-critical infrastructure. But with great power comes great responsibility, and for Kubernetes platform teams, that means rethinking security.
Read Post

Kubernetes backup & recovery deep dive: DR and VM protection with Spectro Cloud Palette & CloudCasa

Sep 11, 2025 By CloudCasa In CloudCasa
Hands-on deep dive into building rock-solid resilience for modern Kubernetes environments. We’ll start with the must-know foundations of Kubernetes backup, disaster recovery and compliance, then explore real-world pitfalls that simple snapshots or open-source Velero can miss. You’ll learn how deploying CloudCasa through Spectro Cloud Palette delivers enterprise-grade, policy-driven protection across multicluster environments. Next, we’ll tackle an emerging challenge: safeguarding virtual-machine workloads running on Kubernetes through KubeVirt solutions like Palette VMO.
View Video
tigera

Navigating DORA with Calico: Strengthening Kubernetes Operational Resilience in Financial Services

Sep 9, 2025 By John Alexander In Tigera
A single cyberattack or system outage can threaten not just one financial institution, but the stability of a vast portion of the entire financial sector. For today’s financial enterprises, securing dynamic infrastructure like Kubernetes is a core operational and regulatory challenge. The solution lies in achieving DORA compliance for Kubernetes, which transforms your cloud-native infrastructure into a resilient, compliant, and secure backbone for critical financial services.
Read Post
tigera

Calico Egress Gateway: A Cost-Effective NAT for Kubernetes

Sep 4, 2025 By John Alexander In Tigera
When Kubernetes workloads need to connect to the outside world, whether to access external APIs, integrate with external systems, or connect to partner networks, they often face a unique challenge. The problem? Pod IP addresses inside Kubernetes clusters are dynamic and non-routable. For external systems to recognize and trust this traffic, workloads need a consistent, dependable identity. This means outbound connections require fixed, routable IP addresses that external services can rely on.
Read Post
armo

Kubernetes 1.34 - Top Security Enhancements

Aug 21, 2025 By Ben Hirschberg In ARMO
Kubernetes v1.34 is coming soon, and it brings a rich batch of security upgrades – from alpha features that hint at the future of zero-trust Kubernetes, to mature enhancements making their way into stable releases. Whether you’re managing a production cluster or exploring new security patterns, this release has something worth your attention.
Read Post
cyberark

Bridging runtime visibility and secrets management in Kubernetes with Sweet Security and CyberArk

Aug 14, 2025 By Niels van Bennekom In CyberArk
Secrets management is a foundational pillar of cloud security. It enables secure storage, rotation, and access control for application secrets. But in Kubernetes environments, secrets don’t just live in vaults; they move, execute, and often proliferate across clusters and containers. Without visibility into how secrets are used at runtime, organizations risk exposing sensitive data without realizing it.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.