Security news aggregator

Latest coverage for Kubernetes

Kubernetes is an open-source system for managing containers, where misconfigurations and vulnerabilities can expose workloads, secrets, and clusters.

5 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Kubernetes is an open-source platform that automates deploying, scaling, and updating containerized applications across a cluster of machines. It maintains the desired state of workloads, while its control plane assigns work to nodes and manages networking, storage, and service discovery.

Its security depends on several connected layers. The Kubernetes API is a high-value control surface: weak authentication, excessive RBAC permissions, or an exposed dashboard can allow unauthorized changes. Cluster state, including Kubernetes Secrets, is stored in etcd and should be access-controlled and encrypted at rest. Container images and deployment configurations require vulnerability review and trusted-source or admission controls; a privileged container or vulnerable node can increase the risk of escaping workload isolation. Network policies can restrict pod-to-pod communication, while version and node patching, audit logs, and tested access-revocation procedures support detection and response.

Volume over time

Weekly headline count for the current query.

Showing 5 most recent headlines Filtered view
Bank Info Security 10 months, 3 weeks ago

Okta to Purchase Axiom Security to Bolster Privileged Access

Just-in-Time, Database, Kubernetes Access Fuel Privileged Access Startup M&ABy acquiring startup Axiom Security, Okta aims to enhance privileged access by offering broader coverage of sensitive assets like Kubernetes containers and databases. The company says the move accelerates value delivery and complements Okta's existing privileged access capabilities.

Bank Info Security 27 Aug 2025, 10:30 a.m. Containers Database Kubernetes Okta Startup
Bank Info Security 1 year, 3 months ago

Critical Kubernetes Controller Flaws: 4,000 IPs Exposed

Patch Urgency Increases as Code to Exploit CVE-2025-1974 Vulnerability PublishedScans reveal that thousands of Kubernetes clusters' Ingress Nginx Controller software remain internet-exposed, which experts said is bad practice. More importantly, the software needs updating to fix a critical vulnerability that can be remotely exploited to seize complete control of a cluster.

Bank Info Security 29 Mar 2025, 7:30 a.m. CVE-2025-1974 Critical Vulnerability CVE Exploit Exposure Flaw Kubernetes Patch Vulnerability
Bank Info Security 1 year, 3 months ago

Kubernetes Patch: 43% of Clusters Face Remote Takeover Risk

Immediate Patching Urged to Address Flaws in Widely Used Ingress Nginx ControllerCritical vulnerabilities in Ingress Nginx Controller - a widely used component of the popular Kubernetes container management system - need immediate patching to prevent attackers from taking control of cloud-based applications, management interfaces and more, researchers warned.

Bank Info Security 25 Mar 2025, 9:00 a.m. Cloud Flaw Kubernetes Patch Research Vulnerability
Bank Info Security 2 years, 1 month ago

Cloudflare Buys BastionZero to Guard Critical Infrastructure

Acquisition of Zero Trust Tool Secures Remote Access to Critical IT InfrastructureCloudflare acquired BastionZero to provide its platform with enhanced zero trust controls for servers, Kubernetes clusters and databases. The purchase aims to secure remote access, improve compliance and simplify infrastructure management for hybrid IT environments.

Bank Info Security 31 May 2024, 7:30 a.m. Acquisition Cloudflare Compliance Critical Infrastructure Enhancement Kubernetes Zero Trust
Bank Info Security 2 years, 3 months ago

Possible Chinese Hackers Use OpenMetadata to Cryptomine

Hackers Target OpenMetadata Platforms Running on Cloud Kubernetes EnvironmentsHackers who appear to be Chinese are exploiting vulnerabilities in the OpenMetadata platform running as workloads on Kubernetes clusters to download cryptomining software, warned Microsoft. "I want to buy a car," the hackers tell victims in a note and solicit monero donations.

Bank Info Security 18 Apr 2024, 11:00 a.m. China Cloud Cryptocurrency Kubernetes Microsoft Victims Vulnerability