Tagged “kubernetes”
2 posts
Exposed Kubernetes API Servers Are an RBAC Time Bomb
Attackers are actively hunting internet-facing Kubernetes API servers with anonymous-auth on and default service accounts holding broad RBAC access.
securitykubernetesrbaccloud
CVE-2024-21626 and runc's shared-kernel blast radius
A leaked file descriptor in runc, and a fresh 2025 trio of procfs races, show what "container isolation" really guarantees — and what it doesn't.
securitycontainerskubernetes