InfoQ Homepage Security Content on InfoQ
-
Cloud Security Challenges in the AI Era - How Running Containers and Inference Weaken Your System
Marina Moore, a security researcher and the co-chair of the security and compliance TAG of CNCF, shares her concerns about the security vulnerabilities of containers. She explains where the issues originate, providing solutions and discussing alternative routes to using micro-VMs rather than containers. Additionally, she highlights the risks associated with AI inference.
-
The Hidden Vulnerability of the Open Source Software Supply Chain: the Underlying Infrastructure
Software supply chain veteran Brian Fox unpacks the security implications of the new EU Cyber Resilience Act and its profound impact on open-source projects. He reveals the hidden infrastructure risks threatening open-source projects and shares insights for senior software leaders navigating this regulatory landscape.
-
Is WebAssembly the Secure, Efficient Alternative Everybody was Waiting for?
Laurent Doguin and Geoffroy Couprie discuss their pioneering work with Wasm on the infrastructure side. They walk us through the benefits and challenges of building a platform over WebAssembly and why it’s the safer alternative to containers.
-
Implement the EU Cyber Resilience Act's Requirements to Strengthen Your Software Project
Eddie Knight, OSPO lead at Sonatype, discusses how the EU Cyber Resilience Act can help with improving your software project’s security and in the same time to slow down the alarming acceleration of software supply chain attacks.
-
Lessons Learned from the CrowdStrike Incident: InfoQ Dev Summit Munich 2024 Preview
In this podcast episode, speakers from the InfoQ Dev Summit Munich 2024 discuss the recent CrowdStrike incident, which triggered widespread outages and highlighted vulnerabilities in cloud infrastructure. The panel shares personal experiences and emphasizes the implications of cloud dependency, and the lessons learned about risk management and automation in organizations.
-
Chris Matts on BDD, Real Options, Risk Management and the Impact of Culture for Effective Outcomes
In this podcast Chris Matts, “The IT Risk Manager”, one of the original thinkers behind Real Options, Feature Injection and Behaviour Driven Development, talks about BDD, Real Options, Risk Management and the Impact of Culture for Effective Outcomes.