DevSecOps in Kubernetes

The talk is about how to or how to not implement cloud native projects in highly regulated environments.

24.5.2024

Muhammad Ihsan Haikal Sukmana

2 min

Table of Contents

Contributors

Muhammad Ihsan Haikal Sukmana

Muhammad Ihsan Haikal Sukmana

facebook social icon

linkedin social icon

The talk is about how to or how not to implement cloud-native projects in highly regulated environments. You will get some insights into real-world projects where Kubernetes is used to run the latest applications and control critical infrastructure in Germany and Europe.The examples include container gardening and how to convince developers to deliver minimal and compliant containers, onboarding security team members to get the Sec into DevOps, running CI/CD pipelines with 3rd party vendors, air-gapped cloud-native architectures, and running clusters with the highest availability.

‍

Watch the talk here.

facebook social icon

linkedin social icon

Andere interessante Blogbeiträge lesen

Cloud Sicherheit

Die gängigsten Cloud-Angriffstechniken verständlich erklärt

Red Canary hat kürzlich den Threat Detection Report 2025 veröffentlicht. Dieser Artikel beleuchtet die im Bericht genannten, am häufigsten auftretenden Cloud-Angriffstechniken und bietet weiterführende Einblicke sowie praktische Gegenmaßnahmen für

Cloud-Sicherheit, Cloud-Angriffsemulation, AWS-Sicherheit, Azure-Sicherheit

Cloud Sicherheit

Funktions-Release: Cloud-Angriffsemulation für Azure

Wir freuen uns, die Veröffentlichung der Mitigant Cloud-Angriffsemulation für Azure bekannt zu geben – ein Feature, das sich viele unserer Kunden gewünscht haben. Wir sind begeistert, Unternehmen, die Azure nutzen, eine nahtlose Emulation von

Cloud-Angriffsemulation

Cloud Sicherheit

Funktions-Release: Januar 2025

January 30, 2025

Wir freuen uns, eine Reihe neuer Funktionen für die Mitigant-Plattform vorstellen zu können: Attack-as-Code, Attack Scheduler, Kubernetes-Schwachstellenpriorisierung und DefectDojo-Integration.

Cloud-Angriffsemulation

Cloud Sicherheit

LLMJacking-Angriffe auf Amazon Bedrock verstehen

October 13, 2024

LLMJacking-Angriffe zielen zunehmend auf GenAI-Workloads in Amazon Bedrock ab. Bei diesen Angriffen verschaffen sich Cyberkriminelle unbefugten Zugriff auf Large Language Models und verkaufen diesen Zugang gewinnbringend über Chatbots weiter.

Security für GenAI, AWS Security, Cloud-Sicherheit

Cloud Sicherheit

AgentCore or AgentSore: Cross-Agent Privilege Escalation in Bedrock AgentCore

Bedrock AgentCore starter toolkit ships an overly permissive IAM role that attackers exploit to compromise critical AgentCore components. This article discusses practical exploitation of these weaknesses, detection opportunities & countermeasures.

Cloud Attack Emulation, AI Security, Cloud Security, AI Red Teaming

Cloud Sicherheit

Effective Red Teaming in the Agentic Era: Amazon Bedrock (Part I)

AI Red Teaming plays a central role in AI quality of service, ensuring end users are not harmed or frustrated by malicious output. This article provides practical AI Red Teaming guidance for Amazon Bedrock.

AI Red Teaming, Red Teaming, Cloud Security, AWS Security

Cloud Sicherheit

Feature Release: Cloud Penetration Testing with Prowler and Wiz Integrations

Mitigant Cloud Pentests now integrate with Prowler and Wiz, enabling seamless validation of CSPM findings through real, safe attack execution that surfaces SCP-aware privilege-escalation paths, fully visualized and mapped to compliance benchmarks.

cloud security,cloud attack emulation, cloud penetration testing

Cloud Sicherheit

The Best of Mitigant Blog Articles in 2025

January 8, 2026

This article highlights our top blog articles in 2025, from AI security to Cloud Attack Emulation, including research referenced in Splunk's Security Analytics Story and pioneering Adversarial Exposure Validation.

cloud security, cloud attack emulation,

Cloud Sicherheit

Mitigant Threat Catalog: 61 Techniques & 12 AWS Services Added

Mitigant Threat Catalog massive update! We added 61 techniques & 12 AWS services, totalling 91 techniques across 32 AWS services. The catalog now includes techniques across 11 MITRE ATT&CK tactics.

adversary emulation, cloud security, red team, purple team

Cloud Sicherheit

Introducing the Mitigant Threat Catalog: From Static Descriptions to Dynamic Executions

February 13, 2026

We are launching (1) Mitigant Threat Catalog, a free, interactive resource that transforms MITRE ATT&CK cloud techniques into executable CLI commands, (2) The Cloud Attack Language, a format for effectively constructing complex, multi-step attacks.

Cloud Attack Emulation

Cloud Sicherheit

Mitigant Attack Builder: Custom Cloud Attacks in Seconds

November 21, 2025

Mitigant Attack Builder empowers defenders to build cloud attacks within seconds, enabling production-ready security tests without sacrificing time and quality.

Mitigant Attack Builder: Custom Cloud Attacks in Seconds

Cloud Sicherheit

CSPM Scans Are Not Cloud Penetration Tests: Understanding the Critical Differences

December 9, 2025

This blog addresses the misconception that CSPM scans are equivalent to cloud penetration tests. Understanding the critical differences between configuration auditing and security validation is essential for a robust cloud security posture.

Cloud Attack Emulation

Cloud Sicherheit

Feature Release: Leveraging AI for Adversary Emulation

November 2, 2025

We are excited to announce three groundbreaking features that represent a significant leap forward in Cloud Attack Emulation & offensive security: AI-Powered Attack Report Summarization, AI-Powered Attack Recommendations, and Bring Your Own Role.

cloud security

Cloud Sicherheit

Cloud Attack Emulation 101: Shallow Waters

October 23, 2025

In Part I of this series, we explored why adopting the adversary mindset matters. In this second part, we explore how cloud attack emulation works, examine fundamental attack building blocks, and outline how to evolve an effective security strategy.

cloud attack emulation, AWS Security, Cloud Security

Cloud Sicherheit

Ultimative Kombination: Cloud-Angriffsemulation trifft auf Microsoft Sentinel

Dieser Artikel befasst sich mit der starken Synergie zwischen Microsoft Sentinel und Mitigant Cloud Attack Emulation.Zusammen bilden diese Cloud-nativen Sicherheitsprodukte eine ultimative Kombination, die proaktive Erkennung und Reaktion ermöglicht.

Cloud Attack Emulation, Azure Security, Threat Detection, Security Operations

Cloud Sicherheit

Feature Release: Multi-Cloud Attack Emulation

We are excited to announce several features recently added to the Mitigant Cloud Security Platform. Multi-cloud attack emulation is a key feature, enabling seamless orchestration of attacks across AWS and Azure.

cloud attack emulation, cloud security, adversary emulation, kubernetes security, azure security, aws security

Cloud Sicherheit

Cloud Attack Emulation 101: Getting Started

This blog post provides foundational information on leveraging Cloud Attack Emulation for security effectiveness by adopting the attacker's mindset and playing the devil's advocate to detect security flaws and blind spots.

cloud attack emulation, cloud security, adversary emulation

Cloud Sicherheit

Navigating The Storm: Understanding the Potential Threat Landscape of Cloud GenAI Services

Prepare for the rapidly evolving cloud GenAI workload's threat landscapes with this blog post in collaboration with European Champions Alliance

Cloud Sicherheit

Das Beste an Mitigant Inhalten im Jahr 2024

January 5, 2025

In diesem Artikel werden die 10 erfolgreichsten Inhalte unserer Website vorgestellt, die bei unserem Publikum am meisten Anklang gefunden haben.

cloud security

Cloud Sicherheit

Nutzung der Emulation von Gegnern für effektive forensische Cloud-Analysen

December 20, 2024

Die Emulation von Gegnern bietet einen praktischen Ansatz zur Verbesserung der forensischen Cloud-Analyse für Sicherheitsteams.

Cloud Attack Emulation

Cloud Sicherheit

Rethinking Cloud Security Strategies with Adversarial Exposure Validation

December 7, 2024

Gartner recently introduced Adversarial Exposure Validation (AEV) as an approach that empowers organizations to focus on validated exposures rather than chasing unimportant vulnerabilities. This article dives deep into AEV for cloud infrastructure.

Cloud Attack Emulation

Cloud Sicherheit

MITRE ATT&CK Cloud Matrix v.16: New Techniques & Why You Should Care Part I

November 20, 2024

The MITRE ATT&CK Framework v.16 was released in October 2024 with over 19 new techniques. This blog discusses two new Cloud Matrix sub-techniques: Modify Authentication Process: Conditional Access Policies (T1556) and Resource Hijacking: Cloud

cloud security, aws security

Cloud Sicherheit

GenAI Security: Cloud Security fit machen für das KI-Zeitalter

October 28, 2024

Da die Akzeptanz von GenAI in den letzten Jahren in verschiedenen Sektoren erheblich zugenommen hat, wird sich auch die Bedrohungslandschaft im Zusammenhang mit GenAI rasant weiterentwickeln.

Cloud Sicherheit

Feature Release: Adversary Emulation Meets GenAI & More

We are excited to release powerful features to the Mitigant Security Platform: Attack Emulation for AWS GenAI services, Mitigant API, and support for AWS Organizations. These features empower organizations to use GenAI cloud services securely.

GenAI, Adversary Emulation, Attack Emulation, AWS Security, Cloud Security, Cyber Resilience

Cloud Sicherheit

Bedrock or Bedsand: Attacking Amazon Bedrock’s Achilles Heel

Amazon Bedrock's Achilles heel is the adoption of S3 as a RAG data source, leading to several GenAI attack vectors, including data poisoning, denial of service & S3 ransomware. This article delves into these attack vectors, detection, and mitigation.

cloud security, aws security, cloud attack emulation, GenAI security

Cloud Sicherheit

Emulating and Detecting Scattered Spider-like Attacks

This article shows how to leverage Threat-Informed Defense to effectively tackle cloud threat actors, e.g., Scattered Spider. Practical attacks & appropriate defense are demonstrated using Mitigant Cloud Attack Emulation & the Sekoia SOC Platform.

cloud attack emulation, threat detection, adversary emulation, AWS Security

Cloud Sicherheit

Cloud Attack Emulation: Democratizing Security Operations in the Cloud

Security operations are the nerve of organizational cybersecurity efforts. An organization’s security policy typically aims to keep it safe by implementing preventive, detective, and recovery measures. Security operations ensure this ambition by s...

cloud-security, cloud-attack-emulation, aws-security

Cloud Sicherheit

Die besten Mitigant-Blog-Artikel im Jahr 2023

Lesen Sie die 10 erfolgreichsten Blogbeiträge von Mitigant im Jahr 2023 zu Cloud-nativer Sicherheit und Cyber-Resilienz.

Cloud Sicherheit

Drift-Management in der Cloud-Infrastruktur

Managing cloud drifts is one of the challenges faced by cloud-native enterprises. While it might be easy to orchestrate complex cloud inf

Cloud Sicherheit

Warum der Schutz Ihrer Cloud-nativen Infrastruktur notwendig ist

Die Cloud-native Nutzung hat in den letzten Jahren zugenommen, was die heutige digitale IT-Infrastruktur unterstützt.

Übernehmen Sie die Kontrolle über Ihre Cloud-Sicherheitslage

Übernehmen Sie in wenigen Minuten die Kontrolle über Ihre Cloud-Sicherheit. Keine Kreditkarte erforderlich.

Demo-Umgebung anfordern

Kostenlose 30-Tage-Testversion starten