Securing 900 K8s: Mercedes-Benz’s Journey to VAPs
This talk explores how Mercedes-Benz secures their massive Kubernetes environment (over 900 clusters!). While Pod Security Policies (PSPs) were previously used, they’ve been deprecated. The new Pod Security Standards (PSS) lack the flexibility needed for Mercedes-Benz’s complex setup. Watch the video to learn: This talk is ideal for anyone managing large Kubernetes deployments and seeking…
Konika Sitoula
Kubernetes Alert: Backdoor in XZ Utils! Secure Cluster Now!
This blog post explores the critical backdoor vulnerability (CVE-2024-3094) discovered in XZ Utils, a data compression library used in major Linux distributions. On March 29, 2024, Red Hat disclosed a critical vulnerability (CVSS rating of 10) affecting the latest versions of XZ tools and libraries (versions 5.6.0 and 5.6.1). This stemmed from a cleverly disguised malicious…