Michael Isbitski (@michaelisbitski, Director Cybersecurity Strategy @sysdig) talks about about Sysdig's 2023 Cloud Native Security and Usage Report. The latest trends, interesting findings and the latest on Cloud Native Security
SHOW: 696
CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotw
NEW TO CLOUD? CHECK OUT - "CLOUDCAST BASICS"
SHOW SPONSORS:
- How to Fix the Internet (A new podcast from the EFF)
- Datadog Application Monitoring: Modern Application Performance Monitoring
- Get started monitoring service dependencies to eliminate latency and errors and enhance your users app experience with a free 14 day Datadog trial. Listeners of The Cloudcast will also receive a free Datadog T-shirt.
- Solve your IAM mess with Strata's Identity Orchestration platform
- Have an identity challenge you thought was too big, too complicated, or too expensive to fix? Let us solve it for you! Visit strata.io/cloudcast to share your toughest IAM challenge and receive a set of AirPods Pro
SHOW NOTES:
Topic 1 - Welcome to the show. Tell us a little bit of your background, and where you focus your efforts at Sysdig?
Topic 2 - Let’s talk about the 2023 report. This is something that Sysdig has run for many years. What are some of the major Container Security and Usage trends you’re seeing this year (2022 to 2023)?
- Report is unique as it looks at real-world data or more than a billion containers
- 6th report, each year we build on the data collected previously
- Beyond the speed of containers and usage data, we also looked at things people care about right now
- Where are there cost savings
- How are we doing with implementing zero trust
- Where can we save time and reduce risk
Topic 3 - It seems like preparedness for attacks, via vulnerabilities, is on the rise? Why do you think we’re seeing things getting worse, rather than better?
Topic 4 - Talk to us about some of the best practices for managing all the vulnerabilities, and how to think about prioritization - such as Common Vulnerability Scoring System (CVSS).
Topic 5 - It appears that Zero Trust is a big buzzword, but maybe companies have zero trust in zero trust. Did this surprise you? What do you think is causing this?
Topic 6 - What are some of the operational best practices that you’re seeing companies doing to help mitigate these ever growing security threats?
FEEDBACK?
