A smaller attack surface should lead to a smaller list of CVEs to track, which in turn should lead to a smaller set of vulns that you should care about. But in practice, keeping something like a container image small has a lot of challenges in terms of what should be considered minimal. Neil Carpenter shares advice and anecdotes on what it takes to...
In this week's enterprise security news, Lots of funding announcements as we approach RSA, New products, The M-Trends also rudely dropped their report the same day as Verizon, Supply chain threats, Windows Recall is making another attempt, MCP server challenges, Non-human identities, A startup post mortem, Remember that Zoom outage a week or two ag...
This week, we discuss Kubernetes attacks and CPU attacks. We also have a better idea of what valuation losses might be for security startups, thanks to the Check Point/Perimeter 81 acquisition. MITRE releases, ATLAS, an ATT&CK-style framework for machine learning models. Bloodhound's new rearchitected Community Edition is out, and Las Vegas's Spher...
Aqua Security reported that at least 60% of the Kubernetes clusters they researched were breached and had an active campaign with deployed malware and backdoors.
