Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Kubernetes Security Fix Blocks Cross-Namespace Pod Creation
Kubernetes released fixes on Sep 23, 2026 for a control-plane flaw that could create a pod outside the namespace where a user's permissions applied. CVE-2026-2…
CRI-O Restore Flaw Can Bypass Kubernetes Security Policies
Kubernetes groups one or more containers into a pod, the basic unit it deploys.
openSUSE Kubernetes Old Important Security Update SUSE-SU-2026-3659-1
SUSE has released a critical security update for kubernetes-old, allowing installation through standard methods like YaST or zypper, aimed at addressing vulner…
SUSE Kubernetes-Legacy Significant Security Update 2026-3659-1
A security update for kubernetes-old has been released, addressing vulnerabilities by rebuilding it against the latest go security release, applicable to sever…
openSUSE Kubernetes Significant Security Patch 2026-3660-1
A security update for Kubernetes has been released, rebuilding it against the latest Go security release, affecting several SUSE and openSUSE products with rec…
Kubernetes Maintainers Expand CSI Path Traversal Fixes Beyond Original Vulnerabilities
Kubernetes maintainers patched two path-traversal vulnerabilities in the NFS and SMB CSI drivers earlier this year. But repository histories show that the secu…
openSUSE Tumbleweed Kubernetes Moderate APIServer Update CVE-2020-8561
openSUSE Tumbleweed has released an update for kubernetes1.36-apiserver-1.36.3-1.1 that addresses a moderate security vulnerability, identified as CVE-2020-856…
openSUSE Tumbleweed Kubernetes Medium CVE-2020-8561 Advisory 2026-11390-1
An update for openSUSE Tumbleweed addresses a vulnerability in kubernetes1.35-apiserver-1.35.7-1.1, enhancing security with the installation of the updated pac…
openSUSE Tumbleweed Kubernetes Medium CVE-2020-8561 Advisory 2026-11389-1
openSUSE Tumbleweed has released an update for kubernetes1.34-apiserver addressing a moderate security vulnerability, identified as CVE-2020-8561, affecting va…
Kubernetes Storage Flaws Expose a Dangerous Security Blind Spot
Two newly fixed storage bugs in Kubernetes showed more than just a problem with path traversal. They found a common security flaw in the cloud: powerful parts …
Hard-Coded Credentials Vulnerability Found In Kubernetes Image Builder
A critical vulnerability just received a fix with the latest Kubernetes Image Builder release. The…Hard-Coded Credentials Vulnerability Found In Kubernetes Ima…
Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain …
Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters
Cybersecurity researchers have disclosed a security flaw impacting Microsoft Azure Kubernetes Services that, if successfully exploited, could allow an attacker…
Fedora 39: kubernetes 2024-662a8b6005 Security Advisory Updates
Updates Fedora 30 to Kubernetes 1.27.13. Resolves CVE-2024-3177: Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin. In addition…
Fedora 38: kubernetes 2024-5bae6c0ea7
Updates google.golang.org/protobuf to v1.33.0 to resolve CVE-2024-24786. Kubernetes is now built with go 1.21.8.
Researchers Detail Kubernetes Vulnerability That Enables Windows Node Takeover
Details have been made public about a now-patched high-severity flaw in Kubernetes that could allow a malicious attacker to achieve remote code execution with …
How Seccomp Profiles Can Improve Kubernetes Security
Seccomp , which comes from "secure computing mode," is a built-in security feature in the Linux kernel that limits the system calls a process can make. Seccomp…
Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service
Google Cloud has addressed a medium-severity security flaw in its platform that could be abused by an attacker who already has access to a Kubernetes cluster t…
Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes
Three unpatched high-severity security flaws have been disclosed in theNGINX Ingress controllerfor Kubernetes that could be weaponized by a threat actor to ste…
Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints
Three interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Window…
Fedora 38: kubernetes 2023-a3fcc0751f
Updates to Kubernetes for F38 and F39. Security fixes for CVE-2023-3955 and CVE-2023-3676. Related update for rawhide already in stable. Update for F37 is curr…
RedHat: RHSA-2023-4862:01 Critical: Multicluster Engine for Kubernetes 2.3.1
Multicluster Engine for Kubernetes 2.3.1 General Availability release images, which contain security updates and fix bugs. Red Hat Product Security has rated t…
RedHat: RHSA-2023-4650:01 Critical: Multicluster Engine for Kubernetes 2.2.7
Multicluster Engine for Kubernetes 2.2.7 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated t…
Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining
Exposed Kubernetes (K8s) clusters are being exploited by malicious actors to deploy cryptocurrency miners and other backdoors.Cloud security firm Aqua, in arep…