GitHub Projects Now Generally Available

Announced in beta at GitHub Universe 2021, GitHub Projects is now generally available, including new features for issue grouping and pivoting, metadata customization, charting, and improved automation.

Cloud Security Posture Management Now Available in Vulnerability Scanner Trivy

The open source vulnerability scanner Trivy has been recently extended to support cloud security posture management (CSPM) capabilities. While initially available only for AWS, Trivy will soon get support for other cloud providers, says Aqua Security.

Open-source Threat Detection Tool Falco Adds Support for Google gVisor

The latest version of Falco introduces support for gVisor, Google’s application kernel providing an additional isolation layer between applications and the host OS. Using Falco 0.32.1 users can monitor security events from gVisor to detect threats and audit containers.

Open-Source Constellation K8 Engine Aims to Bring Confidential Computing to Kubernetes

Constellation is a Kubernetes engine that shields Kubernetes clusters from the rest of the cloud infrastructure using confidential computing and confidential VMs. This creates a confidential context that ensures data is always encrypted, both at rest and in memory.

Multi-Factor Authentication Fatigue Key Factor in Uber Breach

Earlier this week, Uber disclosed that the recent breach it suffered was made possible through a multi-factor fatigue (MFA) attack where the attacker disguised themselves as Uber IT.