JSTGTECH
← All posts

Tagged “kubernetes”

2 posts

Exposed Kubernetes API Servers Are an RBAC Time Bomb

Attackers are actively hunting internet-facing Kubernetes API servers with anonymous-auth on and default service accounts holding broad RBAC access.

securitykubernetesrbaccloud

CVE-2024-21626 and runc's shared-kernel blast radius

A leaked file descriptor in runc, and a fresh 2025 trio of procfs races, show what "container isolation" really guarantees — and what it doesn't.

securitycontainerskubernetes