Users of the Argo continuous deployment (CD) tool for Kubernetes are being urged to push through updates after a zero-day vulnerability was found that could allow an attacker to extract sensitive information such as...
Weaveworks, the GitOps company, announces the acquisition of Magalix, an innovator in cloud native security. With this acquisition, Weaveworks is raising the bar on secure DevOps. click here to read full Article Read more...
Here’s an overview of some of last week’s most interesting news, articles and interviews: A new zero-day is being exploited to compromise Macs (CVE-2021-30869) Another zero-day in Apple’s software (CVE-2021-30869) is being actively exploited...
More and more companies are undergoing digital transformation in the last couple of years. In… What You Need to Know About Kubernetes on Latest Hacking News. click here to read full Article Read more...
Through this guidance, CISA and NSA officials hope to provide system administrators with a secure baseline for future Kubernetes configurations that will avoid intrusions by hackers. click here to read full Article Read More...
Analysts with cybersecurity company Intezer have found that cybercriminals are now going after a new attack vector against Kubernetes clusters via misconfigured Argo Workflows instances. click here to read full Article Read more on...
U.S. and U.K cybersecurity agencies jointly published an alert on a series of large-scale brute-force attacks sponsored by the Russia-linked APT28 group. Users are recommended to change all default credentials and use appropriate network...
Microsoft is warning against a new adversarial campaign that attempts to hijack Azure’s machine learning infrastructure to deploy cryptomining workloads. The recent attacks show how cybercriminals are increasingly targeting Kubernetes clusters and their surrounding...
Cybersecurity researchers on Tuesday disclosed a new large-scale campaign targeting Kubeflow deployments to run malicious cryptocurrency mining containers. The campaign involved deploying TensorFlow pods on Kubernetes clusters, with the pods running legitimate TensorFlow images from the official Docker...
The malware targets Windows containers exploits known vulnerabilities impacting web servers and databases with the end goal of compromised Kubernetes nodes and backdooring clusters. click here to read full Article Read more on Malware...
This article talks about label standard and best practices for Kubernetes security, a common area where I see organizations struggle to define the set of labels required to meet their security requirements. My advice...
Kubernetes clusters can and should be configured for greater security, but when left unsecured, these clusters can be accessed anonymously by anyone who knows their IPs, ports, and APIs. click here to read full...
The hacking group TeamTNT introduced a new piece of malware with an improved ability to steal Docker credentials. It was found exploiting Kubernetes systems. Click here for image source link and to read full...
Unit42 researchers discovered a new malware, Hildegard, that is being leveraged to launch cryptojacking attacks on Kubernetes clusters. Click here for image source link and to read full Article Read more on computer hacking...
Boston-based security operations company Rapid7 has been making moves into the cloud recently, and this morning it announced that it has acquired Kubernetes security startup Alcide for $50 million. Click here for image source...
On December 4, 2020, the Kubernetes Product Safety Committee disclosed a new medium-severity vulnerability (CVE-2020-8554) impacting all Kubernetes versions and is currently unpatched. Image and Report Source connection Read far more on Malware updates...
