Blog
Posts about
Vulnerabilities
As DevOps teams continue to ‘shift security left’ and build container security into the pipeline, integrated toolchains for managing security risk early in the software development lifecycle (SDLC) are becoming critical. The Sonatype Nexus Lifecycle integration with NeuVector enables developers and DevOps teams to manage software vulnerabilities throughout the entire SDLC and even into the production environment. The security risks …
By Gary Duan Application owners and IT administrators have been looking for tools that can help them secure their application pipeline, from the development stage to deployment and production. How to do this reliably and efficiently without slowing down development processes remains a big challenge. This is where Open Policy Agent (OPA) and Kubernetes Custom Resource Definitions (CRD) can help. …
Now part of the NeuVector platform, enterprise DevOps and security teams get the Vulnerability and Compliance Explorer, a high-performance scanner, and enhanced host protection San Jose, CA – April 14, 2020 – NeuVector, the leader in Full Lifecyle Container Security, today announced the NeuVector platform includes new features – purpose-built for enterprise DevOps and security teams – focused on …
By Gary Duan On June 17, 2019, security researchers at Netflix released a series of vulnerabilities they discovered in the Linux and FreeBSD kernel. By sending crafted SACK packets to the vulnerable server, attackers are able to slow down the server’s TCP stack, incur excessive resource usage, and in the worst case scenario, cause a kernel panic. The main vulnerability, …
Attackers can login to root with no password on affected systems On May 8, 2019, a potentially serious vulnerability was announced affecting the Docker Alpine Linux container image. The vulnerability allows an attacker to authenticate as the root user with no password if using Linux PAM or other authentication means. Potentially thousands of downloads of affected images have been downloaded …
