Cloud-Native Security Archives

Container Runtime Security in Kubernetes: What Teams Overlook

Kubernetes security conversations tend to center on the things that happen on the left-hand side of the process. Scanning images, hardening Dockerfiles, and working with registry access controls all tend to frontload ...

Sean Roth | July 27, 2026 | cloud native security, container security, DevSecOps, kubernetes, RBAC, runtime security

Rust Rewrite Readies Kata Containers for Agent Sandboxing

The OpenInfra Foundation has released version 4 of Kata Containers, which arrives with a new Rust-based default runtime that brings new memory safety and performance gains. With the Rust rewrite, the Foundation ...

Joab Jackson | July 24, 2026 | Agent Sandboxing, cloud native, containers, Kata Containers, Rust, virtual machines

Building a Secure Software Development Lifecycle (SSDLC) for Cloud-Native Teams

As cloud-native architectures continue to redefine how applications are built and deployed, security must evolve alongside them. Often bolted on at the end of development, traditional approaches are no longer sufficient in ...

Sean Roth | July 8, 2026 | CI/CD, cloud security, DevSecOps, Secure Software Development Lifecycle, software supply chain, SSDF, SSDLC

Tigera Introduces Lynx, a Unified Control Plane for Kubernetes‑Native AI Agents

The first Kubernetes AI agent control plane is here. Tigera, best known for backing the open-source Calico networking and security stack for Kubernetes, is pushing beyond traditional container security with the launch ...

Steven Vaughan-Nichols | July 2, 2026 | agentic AI, cloud native, container security, kubernetes, Lynx, Tigera

Why Kubernetes Admission Control Is Really a Security UX Problem

Most Kubernetes admission webhooks treat security as binary: accept the configuration, or reject it. That binary thinking has matured an entire category of policy engines (OPA Gatekeeper, Kyverno, ValidatingAdmissionPolicy with CEL) that ...

Ketankumar Jani | June 12, 2026 | Admission Control, DevSecOps, kubernetes, Kubernetes security, Policy Engines

Docker Networking in Production: What Most Teams Get Wrong

Docker makes networking feel simple. You run a container, expose a port, add a –network flag and things connect. In development, that is enough. In production, it is where teams quietly accumulate ...

Garima Agarwal | June 10, 2026 | bridge network, container networking, docker, egress control, network segmentation

How to Implement Shift-Left Security in Cloud-Native Applications?

Most security teams still treat cloud-native security as something to handle after deployment. That approach is costing them more than they realize. According to research, the average cost of a data breach ...

James Miller | May 18, 2026 | CI/CD pipelines, cloud native security, DevSecOps, Kubernetes security, shift left security

The Questions Every Team Asks About Docker Sandboxes

Docker Sandboxes launched in March 2026. Since then, I’ve heard the same questions at meetups, on Slack, and during Docker Captain briefings. Instead of writing another overview piece, I want to answer ...

Mahitha Adapa | May 13, 2026 | AI agents, cloud security, Developer Platforms, docker, MicroVMs

Intruder Adds Container Image Scanning to Cloud Security Platform

Intruder expands its cloud security portfolio with intuitive, agentless container image scanning. Simplify vulnerability detection across AWS, Google Cloud, and Azure registries without complex DevSecOps tools ...