Top Trends in Kubernetes Security: TalosCon 2025

In this talk I discuss some of the fundamental challenges of security in a Kubernetes, cloud native environment, and how Shift-Down Security can help.

Reading: https://github.com/kubernetes/sig-security/blob/main/sig-security-docs/papers/shift-down/shift-down-security.md#shift-down-security

1. SideroLabs 2025 | All rights reserved. Top Trends in K 8 s Security Space Cheryl Hung, 17 Oct 2025, Amsterdam

2. ‹#› oicheryl.com Independent P reviously Sr Director, Ecosystem at Arm Cheryl Hung

3. ‹#›

4. ‹#› What are your challenges when using/deploying containers?

5. ‹#› What % said security ? What are your challenges when using/deploying containers?

6. ‹#› % say security is a challenge when using containers

7. ‹#› % say security is a challenge when using containers

8. ‹#› % say security is a challenge when using containers

9. ‹#› % say security is a challenge when using containers

10. ‹#› % say security is a challenge when using containers

11. ‹#› % say security is a challenge when using containers

12. ‹#› Why is security so tricky?!

13. ‹#› Shared responsibility leads to gaps

14. ‹#› Shared responsibility leads to gaps Misconfiguration is the killer

15. ‹#› Shared responsibility leads to gaps Misconfiguration is the killer Identity is the new perimeter

16. ‹#› Shared responsibility leads to gaps Misconfiguration is the killer Identity is the new perimeter Speed vs security tensions

17. ‹#› So what now?

18. ‹#› “Shift Down” Kubernetes Security Paper Published Feb 2025

19. ‹#› ✨ Application team Develop features Fix defects

20. ‹#› ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ✨ Application team s Develop features Fix defects

21. ‹#› ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects 🔒 Security team Runtime security Compliance Vulnerabilities Misconfigurations SW supply chain

22. ‹#› ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects 🤖 Platform team Self-service / Automation 🔒 Security team Runtime security Compliance Vulnerabilities Misconfigurations SW supply chain

23. ‹#› ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects 🤖 Platform team Self-service / Automation Vulnerabilities Misconfigurations Supply chain 🔒 Security team Runtime security Compliance Vulnerabilities Misconfigurations SW supply chain

24. ‹#› ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects 🔒 Security team Runtime security Compliance Vulnerabilities Misconfigurations SW supply chain 🤖 Platform team Self-service / Automation Vulnerabilities: Manage base images Misconfigurations Supply chain

25. ‹#› ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects 🔒 Security team Runtime security Compliance Vulnerabilities Misconfigurations SW supply chain 🤖 Platform team Self-service / Automation Vulnerabilities: Manage base images Misconfigurations: Manage policies Supply chain

26. ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ‹#› ✨ Application teams Develop features Fix defects 🔒 Security team Runtime security Compliance Vulnerabilities Misconfigurations SW supply chain 🤖 Platform team Self-service / Automation Vulnerabilities: Manage base images Misconfigurations: Manage policies Supply chain: Secure, attest, verify

27. ✨ Application teams Develop features Fix defects ✨ Application teams Develop features Fix defects ‹#› ✨ Application teams Develop features Fix defects 🤖 Platform team Self-service / Automation Vulnerabilities: Manage base images Misconfigurations: Manage policies Supply chain: Secure, attest, verify 🔒 Security team Runtime security Compliance Vulnerabilities Misconfigurations SW supply chain

28. ‹#› Embrace the chaos - platform team manages common concerns

29. ‹#› Embrace the chaos - platform team manages common concerns Automate trust - Policy as Code

30. ‹#› Embrace the chaos - platform team manages common concerns Automate trust - Policy as Code Less is more - complements Shift Left, but reduces developer overhead

31. ‹#› github.com/kubernetes/sig-security/blob/main/sig-security-docs/papers/shift-down/shift-down-security.md

32. Thank you ‹#› oicheryl.com