In this episode, Nerya and Reut discuss the process of creating the Radar in Twistlock, which is the homebase for discovering and managing security across your cloud native assets.

Cloud Native Security Podcast

EP 28 - Exploring the Twistlock Radar

In this episode, Neil walks us through how to create custom audit rules to check if someone is tampering with the Twistlock daemonset.You can use this approach to create your own custom rules for almost anything using the right JSON properties and strings.

EP 27 - Custom Audit Rules

In this episode, Aviv dives into the vulnerability discovered in Sysdig Falco which allows someone to create a buffer overrun that completely bypasses all of Falco's normal functionality.  

EP 26 - Falco Vulnerability

In this episode, Kevin demonstrates the new File Integrity Monitoring feature in Twistlock 19.03. 

EP 25 - File Integrity Monitoring

In this episode, Jeremy talks through and demonstrates how we've slipstreamed Twistlock Console installation and deployment into the Operator Hub mechanisms.

EP 24 - Operator Hub Integration

In this episode, Michael discusses how the Twistlock dev team built the ACI Virtual Node protection feature in Twistlock 19.03. We also discuss the differences in technology between Azure Container Instances and AWS Fargate.

EP 23 - How We Built It - ACI Virtual Nodes

In this episode, Michael walks through the new Native Helm support in Twistlock 19.03, detailing the configuration steps necessary to enable Helm Chart support in Twistlock.

EP 22 - Twistlock 19.03 - Native Helm Charts

In this episode, John Morello explains what we know about the DockerHub compromise, what potential impacts exist for DockerHub users, and what you can do to minimize impact to you and your apps. Twistlock customers are NOT affected.

EP 21 - DockerHub Compromise

In this episode, Michael dives into how we built the Lambda Layers security features to allow Twistlock to be embedded and to secure Lambda Layers.

EP 20 - How We Built It: Lambda Layers Protection

In this episode, Ilana from the Twistlock dev team discusses the process that she went through to create the Istio visibility, vulnerability management, and prevention features in Twistlock.

EP 19 - How We Built It: Istio

In this episode, Ashley discusses and demonstrates the advantages of using Assigned Collections to provide granular visibility and security to your cloud native environments.0:51- Twistlock 2.4 - Projects1:30- Twistlock 1.8 - Collections2:24- Inside of Projects, team granular permissions2:38- Demo time11:03- Integrating granular control into DevOps lifecycle

EP 18 - Twistlock 19.03 - Assigned Collections

In this episode, Paul demonstrates more host protection features, specifically host forensics, that are built into Twistlock 19.03. Paul demonstrates how anomalous activity can be tracked, alerted, and prevented through Twistlock on any host.

EP 17 - Twistlock 19.03 - Host Forensics

In this episode, Omri details how Twistlock built the Kubernetes Audit rules features that integrate with Kubernetes AuditSink, as well as audits for GKE. 0:35- What are Kubernetes audits?1:30- Kubernetes audit rules in Twistlock3:28- How we built this feature5:30- Integration with Kubernetes dynamic backend feature6:10- demo time12:58- GKE Audits

EP 16 - How We Built It - Kubernetes Audit Rules

In this special episode, Ariel goes through the details of the latest Kubernetes CVE, CVE-2019-1002101, and explains how containers are vulnerable, what the vulnerability exposes, and how to get the latest kubectl update to mitigate the vulnerability.Link to Twistlock Labs detailed blog post:https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/Link to Twistlock Labs post on CVE-2017-1002101:https://www.twistlock.com/labs-blog/deep-dive-severe-kubernetes-vulnerability-date-cve-2017-1002101/Link to Kubernetes kubectl fix:https://github.com/kubernetes/kubernetes/issues/61297Contact info for Ariel and Twistlock Labs:Ariel - ariel@twistlock.comLabs - labs@twistlock.comTwitter - @twistlocklabs

EP 15 - Disclosing a directory traversal vulnerability in Kubernetes copy – CVE-2019-1002101

In this episode, Neil demonstrates the new Twistlock 19.03 feature around RASP Defender, which allows the same level of visibility, automation, and protection in non-managed cloud native resources.

EP 14 - Twistlock 19.03 - RASP Defender

This podcast will cover many topics relevant to the Cloud Native space, including ecosystem topics like Docker Security and Kubernetes security, RBAC, monitoring and alerting, and many, many more. We'll also partner with the Twistlock Labs team to chat through the latest and great cloud native security research. We'll also cover deep dives on Twistlock product releases, and a meta level on those to show developers how we built those features. Partners will come on the podcast as well to describe some of Twistlock's integration features and how to make the best use of multiple tools to keep your apps secure in the cloud.

hubhopper

Cloud Native Security Podcast

hubhopper