Archive of stories published by SSE Blog

Homepage

Open in app

All

Philipp Belitz in SSE Blog

Aug 7, 2020

Container Image Signatures in Kubernetes

Container image signatures are a rarely implemented security feature, even though images’…

1 response

Christoph Hamsen in SSE Blog

Jul 27, 2021

A typical development infrastructure consisting of developers, source code repositories, CI/CD pipeline, image registry and Kubernetes cluster is depicted. In a first step, developers or the CI/CD pipeline push signed images to the registry. In a second step, the images are pulled and their signatures are validated before deployment to ensure they have not been tampered with and come from a valid source.

Connaisseur 2.0 released!

Privilege Escalation in AKS Clusters

Default AKS cluster stores admin credentials in Kubernetes…

2 responses

Hipstertrojan in SSE Blog

Apr 27, 2023

Building a Red Team Infrastructure in 2023

The components of a red team infrastructure: what is…

Peter Thomassen in SSE Blog

Jul 12, 2020

Public Suffix Lookups Without Parsing the PSL

Tackling a New Challenge with the DNS

CSandker in SSE Blog

May 17, 2023

Image shows a cockpit with a thrust lever, many buttons, switches, and screens that is supposed to visualize complexity and potential of Microsoft Configuration Manager (SCCM or MECM).

Active Directory Spotlight

Attacking Microsoft Configuration Manager (SCCM/MECM)

1 response

Bastian Kanbach in SSE Blog

Apr 4, 2023

Reconnaissance: Microsoft Teams user enumeration

A fresh look at user enumeration in Microsoft Teams

Christoph Hamsen in SSE Blog

Oct 18, 2021

Connaisseur is a Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster. Its Helm charts are now published on Artifact Hub. The image shows a screen shot of the Artifact Hub Connaisseur repository: https://artifacthub.io/packages/helm/connaisseur/connaisseur

Connaisseur v2.2 — Improving Usability of Container Signature Validation in Kubernetes

These were the top 10 stories published by SSE Blog; you can also dive into yearly archives: 2020, 2021, 2022, 2023, and 2024.

About

SSE Blog

SSE — Secure Systems Engineering

More information

Container Image Signatures in Kubernetes

Connaisseur 2.0 released!

Verify Container Image Signatures in Kubernetes using Notary or Cosign or…

Active Directory Spotlight: Trusts — Part 1. The Mechanics

Active Directory Spotlight: Trusts — Part 2. Operational Guidance

Privilege Escalation in AKS Clusters

Default AKS cluster stores admin credentials in Kubernetes…

Building a Red Team Infrastructure in 2023

The components of a red team infrastructure: what is…

Public Suffix Lookups Without Parsing the PSL

Tackling a New Challenge with the DNS

Active Directory Spotlight

Attacking Microsoft Configuration Manager (SCCM/MECM)

Reconnaissance: Microsoft Teams user enumeration

A fresh look at user enumeration in Microsoft Teams

Connaisseur v2.2 — Improving Usability of Container Signature Validation in Kubernetes