Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
381,000-plus Kubernetes API servers 'exposed to interne
A large number of servers running the Kubernetes API have been left exposed to the internet, which is not great: they're potentially vulnerable to abuse.
381,000-plus Kubernetes API servers 'exposed to internet'
A large number of servers running the Kubernetes API have been left exposed to the internet, which is not great: they're potentially vulnerable to abuse.
Hardening Kubernetes Multi-Cluster Environmen
Kubernetes has quickly become a de facto tool within enterprise software development environments, enabling DevOps engineers to scale large numbers of containe…
New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers
A newly disclosed security vulnerability in the Kubernetes container engine CRI-O calledcr8escapecould be exploited by an attacker to break out of containers a…
Linux Kernel Bug Allows Kubernetes Container Esca
Hackers could exploit a Linux kernel bug to escape Kubernetes containers and access critical resources; however, the threat is minimized as any attacker needs …
Securing Kubernetes at the Infrastructure Lev
Infrastructure security is important to get right so that attacks can be prevented''or, in the case of a successful attack, damage can be minimized. It is espe…
Kubernetes security will have a breakout year in 20
While it's come a long way over the past year, Kubernetes security has not yet reached maturity. But judging from the level of investment in 2021 into technolo…
SUSE: 2021:386-1 caasp/v4/kubernetes-client Security Upda
The container caasp/v4/kubernetes-client was updated. The following patches have been included in this update:
Kubernetes hardening: Drilling down on the NSA/CISA guidan
NSA/CISA Kubernetes hardening guidance offers a solid foundation for securing Kubernetes environments. Here are the key components and why they're important.
NSA, CISA release Kubernetes hardening guidance following Fancy Bear attac
Hardening guidance from the NSA and CISA seeks to educate IT administrators about cloud security risks and best practices for implementing and maintaining Kube…
SUSE: 2021:197-1 caasp/v4.5/k8s-sidecar Security Upda
The container caasp/v4.5/k8s-sidecar was updated. The following patches have been included in this update:
Using Dynamic Admission Control to Secure Your Kubernetes’ Supply Cha
Kubernetes adoption is up - and so is the number of security incidents in container and Kubernetes environments. One of the ways that organizations can tackle …
Kubernetes Launch Bug Bounty Program
Kubernetes has recently announced a much-needed step in the light of its popularity and the growing userbase. Reportedly, Kubernetes hasKubernetes Launch Bug B…
Securing Kubernetes: Bug bounty program announc
Want to help lock down Kubernetes and make some money while you're at it? The Cloud Native Computing Foundation has a new bug bounty program for you.
Fedora 31: kubernetes FEDORA-2020-943f4b03
Update to v1.15.7 (CVE-2018-1002102 kubernetes: improper validation of URL redirection in the Kubernetes API server allows an attacker-controlled Kubelet to re…
openSUSE 2026-11775-1 kubernetes1.35-apiserver Important Access Issues
An update that solves one vulnerability can now be installed.
openSUSE Tumbleweed kubernetes1.34 Moderate Security Update CVE-2026-41178
An update that solves one vulnerability can now be installed.
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.A Shodan harveste…
openSUSE Kubernetes-Old Important Security Update 2026-2965-1
An update that can now be installed.
openSUSE 15.6 Kubernetes Important Security Update SUSE-SU-2026-2942-1
An update that can now be installed.
Fedora 43 kubernetes1.35 Moderate DoS Advisory 2026-0544eff1d8
Update to release v1.35.6 Resolves: rhbz#2467606 Upstream fixes
Fedora 43 Kubernetes1.34 Significant DoS Patch 2026-88ab77d111
Update to release v1.34.9 Resolves: rhbz#2467605 Upstream fixes
Fedora Kubernetes 1.33.13 Important Denial of Service Fix 2026-c2a89ccca5
Update to release 1.33.13 Resolves: rhbz#2467604 Upstream fix
Fedora 44: kubernetes1.35 2026-b56d6f4b79
Update to release v1.35.6 Resolves: rhbz#2467606 Upstream fixes