Kubescape 3.0 Announced

By ADMIN Team

The open source cluster scanning tool helps detect misconfigurations.

Kubescape 3.0 has been released, reports HelpNetSecurity. The open source Kubernetes security platform aimed at DevSecOps and platform engineers, offers risk analysis, security, compliance, and misconfiguration scanning.

According to the GitHub page, Kubescape “scans clusters, YAML files, and Helm charts. It detects misconfigurations according to multiple frameworks (including NSA-CISA, MITRE ATT&CK and the CIS Benchmark).”

New features include:

Scan results stored as Kubernetes resources inside API objects
Scanning container images for vulnerabilities from the CLI
Reporting on the vulnerabilities of all the images in a cluster

Related content

Secure Kubernetes with Kubescape
Kubescape checks Kubernetes container setups for security and compliance issues, making life easier for administrators.

more »
Nearly 1 Million Misconfigured Kubernetes Instances Found Vulnerable

more »
Trivy security scanner
The Trivy open source tool provides information on container and software security.

more »
News for Admins
In the news: Red Hat Announces Ansible Lightspeed with IBM watsonx Code Assistant; Dell APEX Cloud Platform for Red Hat OpenShift Announced; NSA Offers Best Practices for OSS in Operational Technology Environments; Civil Infrastructure Platform Adds New Super-Long-Term Linux Kernel; HTTP/2 Protocol Exploited in Largest DDoS Attack Ever; Docker Announces Three New Products for Secure App Delivery; CloudBees Updates Jenkins and Offers New DevSecOps Platform; Linkerd 2.14 Released with Improved Multi-Cluster Support; NIST Releases Draft of Cybersecurity Framework v2.0; CISA and MITRE Announce Open Source Caldera for OT

more »
Build a secure development and production pipeline
We investigate best practices to secure CI/CD pipelines with DevSecOps.

more »