🧰 Kubernetes

The items that name it 89

• CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation
  articleas classification.technologies2026-10-30
• The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
  articleas affected products2026-10-29It is written here as Kubernetes (service account token theft, secrets dumping, kubernetes.default.svc, dashboard).

  service account token theft, secrets dumping, kubernetes.default.svc, dashboard

• The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
  writeupas affected products2026-10-29It is written here as Kubernetes (service account tokens, API, dashboard, pre-1.24 legacy SA secrets).

  service account tokens, API, dashboard, pre-1.24 legacy SA secrets

• David Gutierrez | Eng (@david_x_ai) on X
  threadas classification.technologies2026-10-26
• Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles
  writeupas classification.technologies2026-10-25
• Tailworm – Tailscale Vulnerabilities
  writeupas classification.technologies2026-10-25
• Compromised eMudhra intermediate certificates
  advisoryas classification.technologies2026-10-21
• Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
  writeupas affected products2026-10-19It is written here as Kubernetes (clusters, service account tokens, Secrets, ConfigMaps, RBAC, GitOps controller).

  clusters, service account tokens, Secrets, ConfigMaps, RBAC, GitOps controller

• ♫Why♥Not♪ (@Python_s_) on X
  advisoryas classification.technologies2026-10-09
• Kubernetes Agent Sandbox Explained
  articleas classification.technologies2026-10-07
• Kubernetes Agent Sandbox on AWS EKS (Step-by-Step Guide)
  writeupas classification.technologies2026-10-07
• DevopsCube (@devopscube) on X
  threadas affected products2026-10-07

  namespaces checked for missing NetworkPolicies

• Improving SPIRE security and resiliency with AWS managed services
  articleas classification.technologies2026-10-06
• SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors
  writeupas classification.technologies2026-10-05
• Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals
  articleas classification.technologies2026-10-05
• Introducing Solana Microscope: Program Monitoring and Alerts
  toolas tools2026-10-05

  Reference manifests provided for teams already operating their own observability infrastructure

• Five Kubernetes Security Gaps Attackers Chain Together
  articleas affected products2026-10-02
• The Fine Art of Frustrating the Adversary
  articleas classification.technologies2026-10-01
• Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
  articleas classification.technologies2026-09-30
• The DevSec Blueprint (DSB) (@devsecblueprint) on X
  courseas affected products2026-09-30

  Clusters, workloads, and cluster security boundaries covered by the course

• OperTraitor — Kubernetes Operator RBAC Privilege-Escalation Scanner
  articleas affected products2026-09-30
• ​​Beyond source code: A path to the keys to the kingdom
  writeupas affected products2026-09-29

  Cluster resources targeted; kube agent deployed and kubeconfig files (connection details and authentication information) for more than 50 resources were harvested and used to access clusters.

• OperTraitors: How Kubernetes Operators Betray Your Security Posture
  articleas classification.technologies2026-09-29
• [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026
  articleas affected products2026-09-24
• Autonomous AI Agents Hack Online Retailers for $25 a Company
  writeupas affected products2026-09-22

  At a US print-on-demand platform, the skimmer was injected via a Kubernetes initContainer added to the production front-end deployment

• Containers Are No Longer a Security Boundary (CVE-2026-80521)
  writeupas affected products2026-09-22

  Pods/nodes affected; container escape can compromise entire K8s node in enterprise production environments

• Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms
  writeupas affected products2026-09-18It is written here as Kubernetes (reachability checks from compromised Node process).

  reachability checks from compromised Node process

• [tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
  articleas classification.technologies2026-09-17
• The state of AI for security: Measuring what matters most for building trust
  articleas affected products2026-09-09
• How Endor Labs AI SAST Learns What Matters to Your Organization | Blog | Endor Labs
  articleas classification.technologies2026-09-07
• Dirty Frag (CVE-2026-43284): the Linux kernel bug that turns read access into root
  writeupas affected products2026-09-04

  Researchers have published working proof-of-concept exploits for container escape via Dirty Frag

• Financially Motivated Threat Actor BREEZE COMET Targets Brazil
  articleas affected products2026-09-01
• LiteLLM
  toolas classification.technologies2026-08-31
• Dev Machine Guard Now Inventories Where Developer Credentials Live
  articleas classification.technologies2026-08-28
• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
  writeupas affected products2026-08-20
• The OpenSourceMalware Show #16
  talkas classification.technologies2026-08-08
• [tl;dr sec] #340 - Anthropic and Meta Agents be Hackin', Agentic Incident Response Notebooks, Figma's AI Code Scanning
  articleas affected products2026-08-07It is written here as Kubernetes (node root access gained in Hugging Face intrusion).

  node root access gained in Hugging Face intrusion

• Swarm of OpenAI Agents Exploit Artifactory Zero-Day to Escape Sandbox and Breach Hugging Face
  articleas classification.technologies2026-08-04
• Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline
  writeupas classification.technologies2026-07-30
• Claude as Autonomous Bug Bounty Hunter
  articleas affected products2026-07-30
• Four incident-response decisions from the Hugging Face breach
  articleas classification.technologies2026-07-29
• Recon-Skills
  repoas classification.technologies2026-07-29
• Atlasのご紹介：WizのAI脆弱性リサーチャー
  articleas affected products2026-07-27

  open-source project scanned by Atlas; previously unknown vulnerabilities found

• From Container Escape to Cloud Takeover
  writeupas affected products2026-07-26It is written here as Kubernetes (pods with privileged: true, hostPID: true and host filesystem mount).

  pods with privileged: true, hostPID: true and host filesystem mount

• Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials
  writeupas classification.technologies2026-07-25
• Beyond MCP: The New Security Playbook for Coding Agents | Blog | Endor Labs
  articleas affected products2026-07-21

  Google described strategy for offering sandbox support in Kubernetes

• Orca Security: Critical Heap Buffer Overflow in NGINX Allows Unauthenticated RCE
  advisoryas classification.technologies2026-07-20
• GoogleCloudPlatform/k8s-aibom
  repoas affected products2026-07-18
• AI-Powered Threat Modeling
  repoas affected products2026-07-17

  example platform in sample architecture ("Microservices on Kubernetes with Redis cache")

• Security incident disclosure — July 2026
  articleas classification.technologies2026-07-16
• deep-scan
  repoas classification.technologies2026-07-14
• LocxZ/SecureSDLC-Lab
  repoas tools2026-07-14

  Deployment platform with hardened manifest configuration

• deep scan tuto
  writeupas classification.technologies2026-07-14
• CVE-2026-61459
  advisoryas classification.technologies2026-07-12
• Unauthenticated RCE in ArgoCD
  writeupas classification.technologies2026-07-11
• awesome-ai-security-tools
  repoas affected products2026-07-11

  platform for Kubernetes Agent Sandbox and Norviq policy enforcement

• Policy-Driven Security and Governance in Kubernetes AI Platforms | HackerNoon
  articleas affected products2026-06-28

  Platform hosting AI workloads (LLMs, RAG systems, vector databases, GPU inference); subject to policy-driven security and governance via RBAC, network policies, admission controllers, and audit logging.

• Automating Penetration Testing with SecureCodeBox on Kubernetes (Kind) + GitHub Actions
  writeupas classification.technologies2026-06-25
• Kogaro
  repoas affected products2026-06-25

  Clusters validated by Kogaro for configuration hygiene, security misconfigurations, resource issues, image issues, and networking gaps

• Pipelock
  repoas classification.technologies2026-06-14
• Orca: 8 Container Security Best Practices for 2026
  articleas affected products2026-06-11It is written here as Kubernetes (default configurations not secure: pods can run as root, no network policies enforced between pods, no restriction on host path mounts).

  default configurations not secure: pods can run as root, no network policies enforced between pods, no restriction on host path mounts

• Orca Security: Critical Jupyter Enterprise Gateway Vulnerabilities
  advisoryas classification.technologies2026-06-11
• Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack
  writeupas classification.technologies2026-06-09
• Kubernetes Runtime Security : The Guide
  articleas affected products2026-06-07
• Why EDR and proxy won’t save you from supply chain malware
  articleas affected products2026-06-02

  Credentials harvested; lateral movement via kubectl exec to other pods

• Nx Console VS Code Extension Compromised
  writeupas affected products2026-06-02

  credentials and service account tokens targeted

• Observing Privilege Escalation in Kubernetes (EKS CloudWatch Observability Add-on)
  writeupas affected products2026-06-01

  Version v1.35 used in testing; Kubernetes v1.36 introduces fine-grained Kubelet authorization (GA) addressing the nodes/proxy issue; EKS's latest available Kubernetes version at time of writing (3rd June 2026) is v1.35, so the add-on's cluster role has not yet been reviewed against v1.36 changes

• Threat Actor Targets Crypto Organizations | Wiz Blog
  writeupas affected products2026-05-27

  Configuration files targeted for credential theft

• IDP Zero-Dollar
  repoas classification.technologies2026-05-13
• Socket: fsnotify Maintainer Dispute
  articleas classification.technologies2026-05-13
• huhusmang/Awesome-LLMs-for-Vulnerability-Detection
  repoas affected products2026-05-13
• Alice and Bob Learn Secure Coding: Chapter 2
  videoas technologies2026-05-11
• Mini Shai-Hulud Worm (Apr–May 2026)
  articleas classification.technologies2026-05-06
• Presidio (Microsoft)
  repoas classification.technologies2026-05-06
• 0xSteph/pentest-ai-agents
  repoas tools2026-05-06It is written here as Kubernetes (K8s).

  Target of container-breakout agent's escape techniques, kubelet exploitation, RBAC abuse

• Octelium
  repoas classification.technologies2026-05-05
• Training State of the Art Vulnerability Discovery Agents through Reinforcement Learning | depthfirst
  articleas tools2026-03-31

  Used to run thousands of sandbox training environments where the agent audits a repository using a shell

• CVE-2025-62878 — Critical Path Traversal in Rancher Local Path Provisioner (CVSS 10.0)
  advisoryas classification.technologies2026-02-10
• cks/tasks/cks/course/README.md at master · ViktorUJ/cks
  courseas classification.technologies
• SCF Controls Platform — open source
  toolas classification.technologies
• derailed/popeye
  toolas affected productsIt is written here as Kubernetes (Popeye works best with Kubernetes 1.25.X; older versions may cause Popeye to fail).

  Popeye works best with Kubernetes 1.25.X; older versions may cause Popeye to fail

• The Vulnerable MCP Project — MCP vulnerability database
  repoas classification.technologies
• NVIDIA/OpenShell — sandboxed runtime for autonomous AI agents
  repoas classification.technologies
• NVIDIA OpenShell — secure runtime for autonomous AI agent fleets
  repoas classification.technologies
• AWS EKS forensics: data sources and investigation tooling (Synacktiv)
  articleas classification.technologies
• AWS EKS Forensics: Data Sources and Investigation Tooling
  articleas classification.technologies
• Gihchathur/kubemotion
  repoas affected products

  Manifests visualized; supports Deployment, StatefulSet, DaemonSet, ReplicaSet, Job, CronJob, Pod, Service, Ingress, ConfigMap, Secret, PersistentVolumeClaim, ServiceAccount, Namespace, Role, RoleBinding, ClusterRole, ClusterRoleBinding, HorizontalPodAutoscaler, PodDisruptionBudget, NetworkPolicy, Re

• Solving the Identity Crisis for AI Agents (Uber)
  articleas affected productsIt is written here as Kubernetes (agent deployment infrastructure).

  agent deployment infrastructure

• Deadbugz: Currently Active MCP Supply-Chain Campaign
  writeupas classification.technologies

In every workspace you can read 115