Sponsored Keynote: Breaking News from the Cilium News Network - Liz Rice, Isovalent at Cisco

Presenters Liz Rice Source CiliumCon NA 2025 Psyllium Con North America 2025: Unpacking the Future of Cloud-Native Networking, Security, and Observability 🚀 Welcome, tech enthusiasts, to a special edition of our blog, bringing you the hottest news directly from Psyllium Con North America 2025 in Atlanta! This vibrant city, steeped in news reporting history, is our hub this week as we dive deep into the world of cloud-native networking, security, and observability. A massive shout-out to our sponsor, Isovalent, for making this coverage possible! ...

November 24, 2025 · 4 min

Transparency Exchange API: Where To Find Product SBOM? - Pavel Shukhman, Reliza

Presenters Pavel Shukhman Source OpenSource SecurityCon NA 2025 Demystifying the Software Supply Chain: Your Guide to the Transparency Exchange API 🚀 Ever felt like you’re playing a guessing game when it comes to the “ingredients” in your software? You’re not alone! In today’s complex digital world, understanding what goes into our products isn’t just good practice; it’s becoming a necessity, especially with new regulations like the EU CRA on the horizon. This is where the revolutionary Transparency Exchange API (TX API) steps in, promising to transform how we manage and share Software Bills of Materials (SBOMs). ...

November 24, 2025 · 5 min

Achieving Positive Outcomes Across Ecosystems: Security Audits in Action - Amir Montazery

Presenters Amir Montazery Source OpenSource SecurityCon NA 2025 Fortifying the Digital Frontier: A Decade of Open-Source Security Audits 🛡️✨ Open-source software is the bedrock of our digital world, powering everything from your favorite apps to critical infrastructure. But with great power comes great responsibility, especially when it comes to security. Amir Montazeri, Managing Director of the Open-Source Technology Improvement Fund (OTF), recently shared invaluable insights into how we can collectively bolster the security of these essential projects. Celebrating its 10th anniversary, OTF is at the forefront of this crucial mission, and their work with the Cloud Native Computing Foundation (CNCF) is a shining example of what can be achieved through dedicated collaboration. ...

November 24, 2025 · 4 min

The State of Git Security With SLSA and Gittuf - Patrick Zielinski & Aditya Sirish A Yelgundhalli

Presenters Patrick Zielinski Aditya Sirish A Yelgundhalli Source OpenSource SecurityCon NA 2025 Fortifying Your Code: A Deep Dive into SLSA and GitHub for Unbreakable Software Supply Chains 🚀 In today’s interconnected digital world, the integrity of our software supply chain is paramount. We’ve all heard the alarming stories: compromised GitHub actions, hijacked organizations, and even vulnerabilities in widely used projects like PHP and Juniper. These incidents underscore a critical truth: a breach at the source code level can have devastating ripple effects. But fear not! The open-source community is tirelessly working to build stronger defenses, and at the forefront of this effort are SLSA and GitHub. ...

November 24, 2025 · 6 min

Can We Really Parse DNS in eBPF? Improving Cilium ToFQDN With In-kernel Policy Upda... Hemanth Malla

Presenters Hemanth Malla Source CiliumCon NA 2025 Unleashing the Power of eBPF: Cilium’s DNS Parsing Revolution 🚀 Hey tech enthusiasts! Ever found yourself frustrated by network policies that feel a bit… clunky? Especially when dealing with those ever-changing IP addresses tied to domain names? Well, get ready for some exciting news! Hemanth, a rockstar Cilium CNCF maintainer and principal engineer at Microsoft on the Azure container networking team, has just dropped a bombshell: Cilium can now parse DNS directly within eBPF! This isn’t just an incremental update; it’s a leap forward that promises to transform how we handle FQDN (Fully Qualified Domain Name) network policies. ...

November 24, 2025 · 5 min