⤷ Title: Common Containers Security Violations — #2 Kubernetes Role or Cluster Role Bound to Default…
════════════════════════
𐀪 Author: Mohamed Harris Peer Mohamed
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 07:32:18 GMT
════════════════════════
⌗ Tags: #containers #kubernetes #rbac #cybersecurity #kubernetes_security
════════════════════════
𐀪 Author: Mohamed Harris Peer Mohamed
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 07:32:18 GMT
════════════════════════
⌗ Tags: #containers #kubernetes #rbac #cybersecurity #kubernetes_security
Medium
Common Containers Security Violations — #2 Kubernetes Role or Cluster Role Bound to Default…
In this series of articles that explain the common security issues in the Containers lifecycle, we’ll deep dive into another commonly seen…
⤷ Title: CRITICAL: Fluent Bit Flaws Enable RCE and Telemetry Tampering in Major Orgs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 03:07:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_12972 #Fluent Bit #Kubernetes Security #Log Tampering #Oligo Security #Remote Code Execution #Telemetry Agent
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 03:07:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_12972 #Fluent Bit #Kubernetes Security #Log Tampering #Oligo Security #Remote Code Execution #Telemetry Agent
Daily CyberSecurity
CRITICAL: Fluent Bit Flaws Enable RCE and Telemetry Tampering in Major Orgs
A critical chain of Fluent Bit vulnerabilities allows RCE, path traversal, and log tampering by exploiting tag handling and an auth bypass. Update to v4.1.1 now.
⤷ Title: Unmasking Critical RCE Flaws in the World’s Most Popular Orchestrator
════════════════════════
𐀪 Author: Niyati Daftary
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 10:42:15 GMT
════════════════════════
⌗ Tags: #cloud_security #rce #cybersecurity #kubernetes_security #kubernetes
════════════════════════
𐀪 Author: Niyati Daftary
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 10:42:15 GMT
════════════════════════
⌗ Tags: #cloud_security #rce #cybersecurity #kubernetes_security #kubernetes
Medium
Unmasking Critical RCE Flaws in the World’s Most Popular Orchestrator
Kubernetes dominates modern infrastructure, powering giants like Google, AWS and countless enterprises, yet its very power breeds critical…
⤷ Title: VoidLink: The “Cloud-First” Malware Hunting Your Linux Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:21:17 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #Chinese Threat Actor #Cloud Security #Cobalt Strike #container security #DevOps Security #eBPF #Kubernetes Security #Linux Malware #supply chain attack #VoidLink #Zig Programming Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:21:17 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #Chinese Threat Actor #Cloud Security #Cobalt Strike #container security #DevOps Security #eBPF #Kubernetes Security #Linux Malware #supply chain attack #VoidLink #Zig Programming Language
Daily CyberSecurity
VoidLink: The "Cloud-First" Malware Hunting Your Linux Servers
New "cloud-first" malware VoidLink targets Linux & containers with advanced stealth. Written in Zig, it mimics Cobalt Strike to evade EDR. Check your cloud.
⤷ Title: Cluster Admin for All: Critical Kyverno Flaw (CVSS 10) Shatters Isolation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 00:27:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admission Controller #cloud_native #CVE_2026_22039 #CVE_2026_23881 #DevSecOps #dos #K8s #Kubernetes Security #Kyverno #privilege escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 00:27:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admission Controller #cloud_native #CVE_2026_22039 #CVE_2026_23881 #DevSecOps #dos #K8s #Kubernetes Security #Kyverno #privilege escalation
Daily CyberSecurity
Cluster Admin for All: Critical Kyverno Flaw (CVSS 10) Shatters Isolation
Critical Kyverno flaw CVE-2026-22039 (CVSS 10) allows policy creators to gain cluster admin rights. Update to v1.16.3 to fix privilege escalation & DoS.
⤷ Title: One-Prompt AI-Powered Black-Box Kubernetes Penetration Test
════════════════════════
𐀪 Author: Andrey Pautov
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 05:49:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #hexstrike #ai #kubernetes_security #penetration_testing
════════════════════════
𐀪 Author: Andrey Pautov
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 05:49:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #hexstrike #ai #kubernetes_security #penetration_testing
Medium
One-Prompt AI-Powered Black-Box Kubernetes Penetration Test
How Cursor + HexStrike MCP Automatically Discovers and Exploits Vulnerabilities. From single entry point to full cluster compromise
⤷ Title: VoidLink Rising: New “AI-Ready” Malware Framework Targets Linux & IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:19:11 +0000
════════════════════════
⌗ Tags: #Malware #Cisco Talos #Cloud Security #Cyber Warfare #IoT security #Kubernetes Security #Linux Malware #Malware Analysis #Modular Framework #UAT_9921 #VoidLink
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:19:11 +0000
════════════════════════
⌗ Tags: #Malware #Cisco Talos #Cloud Security #Cyber Warfare #IoT security #Kubernetes Security #Linux Malware #Malware Analysis #Modular Framework #UAT_9921 #VoidLink
Daily CyberSecurity
VoidLink Rising: New "AI-Ready" Malware Framework Targets Linux & IoT
Cisco Talos reveals VoidLink, a modular Linux malware framework by UAT-9921. Features "compile-on-demand" tools to target IoT & cloud infrastructure.
⤷ Title: Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:43:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #attack path visualization #AWS EKS #cloud_native security #DevSecOps #eks_security_scanner #Go #IAM security #Kubernetes security #RBAC audit #Tech News 2026 #Threat Modeling
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:43:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #attack path visualization #AWS EKS #cloud_native security #DevSecOps #eks_security_scanner #Go #IAM security #Kubernetes security #RBAC audit #Tech News 2026 #Threat Modeling
Penetration Testing Tools
Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
Stop guessing your EKS security posture. Use eks-security-scanner to build threat graphs, detect privileged pods, and audit RBAC/IAM access paths instantly.
⤷ Title: Kubernetes Security Alert: “Ingress-Nginx” Injection Flaw Risks Cluster-Wide Secret Exposure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 02:23:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #container security #CVE_2026_3288 #Data Leakage #infosec #ingress_nginx #Kubernetes Security #nginx #Patch Alert #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 02:23:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #container security #CVE_2026_3288 #Data Leakage #infosec #ingress_nginx #Kubernetes Security #nginx #Patch Alert #Vulnerability
Daily CyberSecurity
Kubernetes Security Alert: "Ingress-Nginx" Injection Flaw Risks Cluster-Wide Secret Exposure
A high 8.8 CVSS flaw (CVE-2026-3288) in ingress-nginx allows arbitrary code execution and massive Kubernetes secret leakage. Patch immediately.
⤷ Title: High-Severity ingress-nginx Flaw Exposes Kubernetes Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 12:05:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #cloud_native #CVE_2026_4342 #cybersecurity #infosec #ingress_nginx #Kubernetes Secrets #Kubernetes Security #nginx #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 12:05:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #cloud_native #CVE_2026_4342 #cybersecurity #infosec #ingress_nginx #Kubernetes Secrets #Kubernetes Security #nginx #Vulnerability
Daily CyberSecurity
High-Severity ingress-nginx Flaw Exposes Kubernetes Secrets
A high-severity 8.8 CVSS flaw (CVE-2026-4342) in ingress-nginx allows attackers to inject malicious code and steal Kubernetes Secrets. Patch immediately.