Sean Michael Kerner

The Cloud Native Computing Foundation (CNCF) announced on March 29 that it is adding the Open Policy Agent (OPA) and the Secure Production Identity Framework for Everyone (SPIFFE) projects to its hosted projects roster. OPA and SPIFFE extend the security capabilities available to cloud and container workloads, helping to fill perceived gaps in existing security […]

Bad Bots Account for Increasing Volume of Web Traffic, Distil Reports Automated scripts and programs, known as bots, are being used for both good and bad purposes. Good bots include things like web search crawlers, while bad bots have malicious intentions, aiming to defraud websites and trick them in some way. According to Distil Networks’ […]

In surprise move, Docker Inc. founder Solomon Hykes announced on March 28 that he is leaving the company he created. “After 10 years building Docker, now feels like the natural moment to move on,” Hykes wrote in an email to eWEEK. “That’s obviously not an easy decision, but I’m certain that it is the right […]

Startup Bit Discovery officially launched on March 27, led by cyber-security industry veteran Jeremiah Grossman. Bit Discovery is building a platform for website asset inventory and portfolio management that will help to improve cyber-security efforts.  The company has raised $2.7 million in venture funding led by Aligned Partners and also benefited from investment by Black […]

The open-source Kubernetes container orchestration platform reached its 1.10 release on March 26, providing organizations with new storage and security capabilities. Among the new features in Kubernetes 1.10 is the beta integration of a new storage capability known as the Container Storage Interface (CSI). The new Kubernetes milestone also provides Transport Layer Security (TLS) bootstrapping […]

The Linux Foundation is continuing to expand its scope, announcing the launch of the LF Deep Learning Foundation on March 26. The goal of the LF Deep Learning Foundation is to make it easier to adopt and deploy artificial intelligence and machine learning methodologies for industry-specific use cases, including cyber-security threat detection, network automation and […]

After years of development and 28 drafts, the Internet Engineering Task Force has approved Transport Layer Security 1.3 as a proposed internet standard. The new standard aims to provide improved security and cryptographic assurances for the internet. “TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, […]

The Cloud Native Computing Foundation (CNCF) has begun a process of performing third-party security audits for its projects, with the first completed audit coming from the Envoy proxy project. The Envoy proxy project was created by ride-sharing company Lyft and officially joined the CNCF in September 2017. Envoy is a service mesh reverse proxy technology that […]

Unauthorized Cryptocurrency Mining Surged in 2017, Symantec Reports In its tracking of attacks over the course of 2017, Symantec saw a lot of different types, but one attack class stood out: unauthorized cryptocurrency mining, also referred to as cryptojacking. In fact, there was an 8,500 percent increase in detected unauthorized cryptocurrency miners on endpoint computers […]

The City of Atlanta is the latest victim of a large-scale ransomware attack, though it could have been worse without the cloud, according Atlanta’s chief information officer.  On March 22, Atlanta Mayor Keisha Bottoms, confirmed that a ransomware attack had occurred against IT systems operated by the city of Atlanta, with attackers demanding payment of […]

Pulse Secure announced its new Pulse Services Director 18.1 release on March 21, providing new virtual Application Delivery Controller (vADC) capabilities to help improve application visibility and security. Application Delivery Controllers (ADCs) can play a central role in load balancing workloads and enabling access to applications. Given its position in a network deployment, ADC technology […]

Fidelis Cybersecurity released its State of the SOC (Security Operations Center) report on March 21, providing insights into the current state of IT security operations. The 16-page report was conducted by 360Velocity for Fidelis and exposes a number of shortcomings in modern SOCs. Among the highlights of the report is the finding that a high […]