AI
Privacy as Infrastructure: Declarative Data Protection for AI on Kubernetes - Joaquin Rodriguez, Microsoft & Krishnendu Dasgupta, AXONVERTEX AI
cloud securityai securitygovernance and risk
Cybersecurity
KubeCon + CloudNativeCon 2026
The Cloud Native Computing Foundations flagship conference gathers adopters and technologists from leading open source and cloud native communities. #KubeCon + #CloudNativeCon.
35
Talks
Day 3
8 talks
In Falco's Nest: The Evolution of Cloud Native Runtime Security - Iacopo Rozzo, Sysdig; Aldo Lacuku, Kong Inc.
defensive securitycloud security
Real-World Supply-Chain Security - Alex Leong, Buoyant
application securitycloud security
WIT Happens: Exploring the Latest Evolution of the SPIFFE and WIMSE Workload Identity Standards.
identity and accesscryptographycloud security
What LLMs Do, and Don't, Know About Securing Kubernetes - Rory McCune, Datadog
cloud securityai securityoffensive security
📚 Tutorial: Attack Defense: Leverage eBPF To Reveal Attack Flows With Rich Context - Constanze Roedig, fusioncore.ai; Markus Gierlinger, Independent; Teodor Janez Podobnik, Prewave GmbH
defensive securitycloud securityoffensive security
When Multitenancy Goes Wrong: A Deep Dive Into Kcp's First CVE - Marvin Beckers, ClickHouse
cloud securityapplication security
Policy Engines for Kubernetes: Picking One Without Losing Your Mind - Nabarun Pal, Broadcom
cloud securitygovernance and risk
Day 4
18 talks
Signed, Sealed, Delivered: Why Reverse Proxies Outperform VPNs - Peter ONeill, Teleport & Boris Kurktchiev, Independent
identity and accessnetwork and infrastructure
Open Policy Agent. (OPA) Intro & Deep Dive - Charlie Egan & Anders Eknert, Apple
identity and accessapplication securitygovernance and risk
Kubernetes Third Party Audit Review - Iain Smart, AmberWolf; Amir Montazery, Open Source Technology Improvement Fund; Rey Lejano, Red Hat; Tabitha Sable, Datadog; Pietro Tirenna, Shielder
cloud securityoffensive securityapplication security
Strengthening CNCF Projects: Impact of Security Self-Assessments - Eddie Knight, Sonatype; Bradley Andersen, k8gb; Justin Cappos, New York University; Shuting Zhao, Nirmata; Orlin Vasilev, SUSE
application securitycloud securitygovernance and risk
Sovereign Identities for Your Cloud Native Architecture With Keycloak - Alexander Schwartz, IBM & Sebastian Łaskawiec, Defense Unicorns
identity and accesscloud security
Automating and Scaling of Threat Modelling for Cloud Native Architecture - Hanna Papirna & Emma Yuan Fang, EPAM Systems
application securitycloud security
Why Security of Kubernetes Comes Down to Linux Security - Marina Moore, Edera
cloud securitydefensive security
Exploring NRI for Automated CA Trust Injection - Tsuzuki Tsuchiya & Kento Kubo, LY Corporation
cloud securitycryptography
Bob and Alice Revisited: Understanding Encryption in Kubernetes - Jackie Maertens & Mitch Connors, Microsoft
cryptographycloud securitynetwork and infrastructure
Why Isn't the Fix in My Container? Tracking CVE Propagation Across 10,000 Projects - Mor Weinberger, Echo Security & Lior Kaplan, Kaplan Open Source
application securitycloud security
Detect, Decide, Defend: Building Cloud Native Security That Fights Back - Matthias Bertschy, ARMO
cloud securitydefensive security
Automate Once, Run Anywhere: The Docker Moment for Security Workflows - Nancy Chauhan & Aseem Shrey, ShipSecAI
application securitydefensive securitycloud security
Audit-Ready Kubernetes: How Chase UK Leveraged Policy as Code for Continuous Compliance - Jim Bugwadia, Nirmata & Nischay Goyal, JP Morgan Chase
cloud securitygovernance and risk
Kubernetes Security at Shopify Scale: Automating Security Across an Infrastructure Monorepo - Jie Wu & Pulkit Garg, Shopify
cloud securityapplication securitygovernance and risk
Invisible Guardrails: Enabling Developer Velocity With a Secure Platform - James Elías Sigurðarson & Vignir Hafsteinsson, Asana
cloud securityapplication securityidentity and access
Hack Me If You Can: Learning Kubernetes Security Through a Role-Play Battle - Aoi Takahashi, Recruit Co., Ltd. & Keita Mochizuki, NTT DATA Japan Corporation
cloud securityoffensive securityapplication security
Hacking GPU Observability: eBPF & Ephemeral Containers in Action on Kubernetes - Brandon Kang, Akamai Technologies
cloud securitydefensive security
How To Break Multi-Tenancy Again and Again ...and What We Can Learn From It - Lorin Lehawany & Sven Nobis, ERNW
offensive securitycloud security
Day 5
9 talks
SB💣💣M: Making SBOMs Play Together - Jacopo Bufalino, CNAM & Agathe Blaise, Thales SIX GTS France
application securitycloud securitygovernance and risk
Tailor Made: Dynamic Fine-Grained Authorization for API Traffic - Erica Hughberg, Tetrate & Andres Aguiar, Okta
identity and accessapplication securitycloud security
The Shared Service Blueprint: A Guide to Multi-Tenancy, Illustrated With KEDA - Aya Igarashi, Preferred Networks, Inc.
cloud securityidentity and accessgovernance and risk
SPIFFE Meets OAuth: Federated Identity for Cloud Native Workloads - Yoshiyuki Tabata, Hitachi, Ltd.
identity and accesscloud security
Cert-manager – Project Update: Beyond 2026 - Tim Ramlot & Maël Valais, Palo Alto Networks
cryptographycloud securityapplication security
Beyond Image Pull-Time: Ensuring Runtime Integrity With Image Layer Signing - Toddy Mladenov, Flora Taagen & Dallas Delaney, Microsoft
cloud securityapplication securitycryptography
A Bug's-Eye View: Kubernetes SIG Security Explains It All - Ian Coldwater, Independent; Tabitha Sable & Rory McCune, Datadog; Iain Smart, AmberWolf; Mahé Tardy, Isovalent at Cisco
cloud securityapplication securitydefensive security
Harbor Project - The Maintainers Session - Yan Wang, Broadcom & Vadim Bauer, 8gears
application securitycloud security
Advanced Kyverno Patterns : Automating Platform Security and Operations - Frank Jogeleit, Nirmata; Johannes Sonner, Deutsche Telekom
cloud securityapplication securitygovernance and risk