August 30, 2024

In this short article, you’ll learn a few key team definitions for any organizations trying to implement a proper security practice. Blue Team When you implement a Blue Team within your organization, it’s all about defense. This is the typical team that organizations will start out with. If you see a SOC within an environment […]

There’s only one way to secure a Kubernetes cluster from an application stack (Deployments, Pods, ConfigMaps, Secrets, etc etc.) perspective, and that’s to see and understand an exploit. Otherwise, it’s all just theoretical, which is why it’s so important for everyone in security (including blue team) to understand how attacks work, pentesting, and vulnerabilities. In

By default, Kubernetes clusters are not secure in the slightest. Everything from: Not being forced to set SecurityContexts. The default Service Account is used to create Pods if you don’t manually set a new one. NetworkPolicies aren’t enforced. And A LOT more. One of the biggest issues is the use of tokens. In fact, it’s

In this blog post, you’ll learn about what AppSec (Application Security) is, what you need to break into AppSec, various AppSec tools, AppSpec terminology, and why it’s exciting. What’s AppSec? AppSec (Application Security) is the process of finding, fixing, and preventing security issues at the code or API (or both) level. The goal with AppSec