Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service
Google Cloud has addressed a medium-severity security flaw in its platform that could be abused by an attacker who already has access to a Kubernetes cluster t…
Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes
Three unpatched high-severity security flaws have been disclosed in theNGINX Ingress controllerfor Kubernetes that could be weaponized by a threat actor to ste…
Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys
Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed to exfiltrate Kubernetes configurat…
Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints
Three interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Window…
RedHat: RHSA-2023-4972:01 Critical: Multicluster Engine for Kubernetes 2.1.8
Multicluster Engine for Kubernetes 2.1.8 General Availability release images, which fix bugs and update container images. Red Hat Product Security has rated th…
Fedora 38: kubernetes 2023-a3fcc0751f
Updates to Kubernetes for F38 and F39. Security fixes for CVE-2023-3955 and CVE-2023-3676. Related update for rawhide already in stable. Update for F37 is curr…
RedHat: RHSA-2023-4862:01 Critical: Multicluster Engine for Kubernetes 2.3.1
Multicluster Engine for Kubernetes 2.3.1 General Availability release images, which contain security updates and fix bugs. Red Hat Product Security has rated t…
RedHat: RHSA-2023-4650:01 Critical: Multicluster Engine for Kubernetes 2.2.7
Multicluster Engine for Kubernetes 2.2.7 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated t…
Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining
Exposed Kubernetes (K8s) clusters are being exploited by malicious actors to deploy cryptocurrency miners and other backdoors.Cloud security firm Aqua, in arep…
Fedora 37: kubernetes 2023-a1d7a29fe5
Patch update to Kubernetes 1.25 for Fedora 37. Primarily a security fix for CVE-2023-2431: Bypass of seccomp profile enforcement.
RedHat: RHSA-2023-3325:01 Critical: Multicluster Engine for Kubernetes 2.1.7
Multicluster Engine for Kubernetes 2.1.7 General Availability release images, which address security issues and update container images. Red Hat Product Securi…
RedHat: RHSA-2023-3296:01 Critical: Multicluster Engine for Kubernetes 2.2.4
Multicluster Engine for Kubernetes 2.2.4 General Availability release images, which fix security issues and update container images. Red Hat Product Security h…
14 Kubernetes and Cloud Security Challenges and How to Solve Them
A recent report entitled Cloud Native and Kubernetes Security Predictions 2023 underscores the rapidly evolving landscape of Kubernetes and cloud security, emp…
RedHat: RHSA-2023-2098:01 Moderate: Multicluster Engine for Kubernetes 2.0.8
Multicluster Engine for Kubernetes 2.0.8 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security ha…
RedHat: RHSA-2023-2061:01 Moderate: Multicluster Engine for Kubernetes 2.1.6
Multicluster Engine for Kubernetes 2.1.6 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security ha…
RedHat: RHSA-2023-1887:01 Critical: Multicluster Engine for Kubernetes 2.2.3
Multicluster Engine for Kubernetes 2.2.3 General Availability release images, which fix bugs and security updates container images. Red Hat Product Security ha…
RedHat: RHSA-2023-1894:01 Critical: Multicluster Engine for Kubernetes 2.1
Multicluster Engine for Kubernetes 2.1 hotfix security update for console Red Hat Product Security has rated this update as having a security impact of Critica…
Kubernetes vs. Docker: Exploring the Synergy in Containerization
Learn about the advantages of using Kubernetes and Docker together, including enhanced security. "Kubernetes and Docker offer security features such as network…
Microsoft: Kubernetes Clusters Hacked in Malware Campaign via PostgreSQL
The Kinsing malware is now actively breaching Kubernetes clusters by leveraging known weaknesses in container images and misconfigured, exposed PostgreSQL cont…
Kinsing Crypto Malware Hits Kubernetes Clusters via Misconfigured PostgreSQL
The threat actors behind theKinsingcryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access t…
What Sysadmins Want to Know about OpenShift and Kubernetes in 2022
The Enable Sysadmin community continues to answer key questions about OpenShift and Kubernetes. Another year has gone by, and what a year it's been! We've had …
New Kubernetes 1.26 Release Boosts Security, Storage, Teases Dynamic Resource Allocation
In the cloud-native space, where applications are purpose built and delivered to run in the cloud, one technology in particular rises above all others '' Kuber…
Top 8 Free Tools for Security Testing and Audit of Your Kubernetes Cluster in 2022
Docker is a technology for containerization, while Kubernetes is a tool for orchestrating container deployments. In the subsequent subsections, we will discuss…
Authentication Bypass Bug Found In AWS IAM Authenticator for Kubernetes
A severe security bug existed in the AWS IAM Authenticator for Kubernetes. Exploiting this vulnerability…Authentication Bypass Bug Found In AWS IAM Authenticat…