CNL - Prioritising Unpatched CVEs in the Kubernetes Ecosystem

Learn to effectively prioritize and manage Kubernetes CVE alerts in this demo-driven conference talk that addresses the overwhelming volume of vulnerability notifications in cloud-native environments. Cut through the noise of constant security alerts by mastering correlation techniques that combine vulnerability data with EPSS (Exploit Prediction Scoring System), ExploitDB intelligence, and CISA KEV (Known Exploited Vulnerabilities) catalog information. Discover practical strategies for risk assessment through live demonstrations of critical CVEs that have impacted real Kubernetes deployments. Develop a systematic framework for identifying and mitigating the vulnerabilities that pose genuine threats to your clusters while avoiding alert fatigue from less critical issues. Gain hands-on insights into threat intelligence integration and learn to make data-driven decisions about patch prioritization in your Kubernetes security workflow.