#kubernetes
6 stories taggedkubernetes.
How one password reset gave hackers the keys to a company's cloud
Microsoft's incident response team says a group it tracks as Storm-3068 walked from a single user account into Azure DevOps, build pipelines and Kubernetes clusters without deploying any malware.
Two Cloud Giants, Two Flaws, Zero Bug Bounties: The 'Confused Deputy' Problem That Won't Go Away
A security researcher found ways to silently hijack administrator control over both Microsoft Azure and Google Cloud infrastructure. Neither company paid a reward. One quietly fixed its flaw without saying so.
NadMesh Botnet Is Quietly Raiding Unprotected AI Servers for Cloud Keys
A new Go-based botnet is scanning the internet for popular AI tools left exposed online, and its own dashboard brags about nearly 4,000 stolen Amazon cloud keys.
Valarian Raises $50 Million to Lock Down AI Workloads in Sensitive Organisations
The UK startup wants to give governments and regulated industries a way to run AI systems they actually control, not one rented from a cloud provider.
Unpatched Argo CD Flaw Turns Your GitOps Engine Into a Deployment Backdoor
A gRPC endpoint that skips authentication, network policies off by default, and Redis credentials sitting in the environment. Synacktiv's research shows how one compromised pod can become a supply-chain pivot.
No Patch, No CVE: Argo CD Repo-Server Flaw Opens Door to Kubernetes Cluster Takeover
Synacktiv reported the unauthenticated RCE bug to maintainers and published without a fix in place.