Tenable Announces Support for Microsoft Azure Linux: A New Way to Achieve Secure Container Development
With the launch of Azure Linux container host for Azure Kubernetes Service, Microsoft enters the open-source Linux distribution container sphere with enhanced security Kubernetes experience. In this blog, we explain key features of Azure Linux and how Tenable can support the security needs of Microsoft customers.
Microsoft Azure Linux is a newly launched container host that provides reliability and consistency from cloud to edge across the Azure Kubernetes Service (AKS), AKS-HCI, and Azure Arc products. Azure Linux node pools can be deployed in a new cluster, added to existing Ubuntu clusters or migrate Ubuntu nodes to Azure Linux nodes. This gives Microsoft customers one place to do all Linux development in a lightweight and agile container environment, reducing the attack surface.
According to Jim Perrin, Principal PM, Microsoft Azure Linux at Microsoft, “With Azure Linux, customers see benefit from the value of having a secure, performant, and fully native AKS container host. Microsoft controls the supply chain for Azure Linux end to end, resulting in a more streamlined image tailored and optimized for AKS. Azure Linux provides a consistent k8s experience throughout the developer and production lifecycle coupled with the level of support you expect from Microsoft.”
Microsoft has been a longtime member of the Tenable partner ecosystem. We recently announced the general availability of Agentless Assessment for Azure and we see the launch of Azure Linux as an important step forward in creating a more secure cloud environment.
Why is Azure Linux more secure?
The reason is simple: Azure Linux container host for AKS is lightweight and only holds the necessary set of packages needed to function. Therefore there aren’t unnecessary packages that could hold vulnerabilities. This gives security teams less to patch and maintain and they know that they aren’t remediating inconsequential packages.
Additionally, Microsoft says that the kernel and other aspects of the OS are built with an emphasis on security and follow the secure-by-default principle, compliant with Microsoft security standards and industry certifications.
Building on key security integrations with Tenable
Microsoft Azure Linux is supported by Tenable Cloud Security. Core featureslike scanning the Azure DevOps Repository, and the integration into the Azure DevOps pipeline — ensures that pipelines are scanned for violations and disabled if high severity violations are found in the code.
The introduction of Agentless Assessment for Azure in Tenable Cloud Security extends our Cloud Security Posture Management capabilities for Microsoft Azure to include vulnerability detection for misconfigurations.
Tenable also has Kubernetes Security Posture Management (KSPM) capabilities for Microsoft Azure environments and a dedicated CIS profile and certification for AKS and Microsoft services across Tenable Cloud Security, Tenable Nessus and Tenable Security Center (formerly Tenable.sc). For more information on key industry frameworks such as CIS and how to operationalize them as part of your security program read the blog: “7 Regulatory and Compliance Frameworks with Broad Cloud Security Implications.”
Tenable is looking forward to helping our customers evaluate and adopt Azure Linux for secure Linux distribution and deepening our integration with Microsoft.
Learn more
- Read the blog, Introducing Tenable Cloud Security Agentless Assessment for Microsoft Azure
- Join us for a Cloud Security Coffee Break
- Check out Microsoft's Azure Linux Documentation for more details
Related Articles
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Cybersecurity Snapshot: RansomHub Group Triggers CISA Warning, While FBI Says North Korean Hackers Are Targeting Crypto Orgs
September 6, 2024Cybersecurity teams must beware of RansomHub, a surging RaaS gang. Plus, North Korea has unleashed sophisticated social-engineering schemes against crypto employees. Meanwhile, a new SANS report stresses the importance of protecting ICS and OT systems. And a Tenable poll sheds light on cloud-native VM. And much more!
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- Cloud
- Cloud
- Container security