Hello ShmooCon Graduating Class of 2025: Welcome to your commencement ceremony — you’re out of the classroom and into the real world! It’s time to use practical technical demos to challenge what you’ve learned about Kubernetes security–even things you may have heard at ShmooCon. Whether you only took the first few weeks of Freshman Kubernetes 101 or made it through Professors Potter’s advanced Kubernetes seminar, you’ll see how Kubernetes attack and defense both get challenged by scaling in the “Real World.” Jay Beale and Mark Manning will join forces for one last ShmooCon talk that will challenge assumptions about how Kubernetes works, show real-world exploits on a hardened, compliant cluster, demo new bypasses that make you feel a little nervous about relying on runtime security tools, and help you figure out whether your security controls are ready to scale. You’ll leave with a roadmap for how to assess Kubernetes security in an organization, a familiarity with the newest features in the KubeHound and Peirates OSS tools, and practical advice for which areas you should be investing your time in over others. Join us and see how organizations have graduated to the next stage of their defensive (or offensive) journey.