Do Son A flaw in Helm (CVE-2025-53547, CVSS 8.5) allows local code execution when updating dependencies via a malicious Chart.yaml and symlinked Chart.lock file
Kubernetes
Trend Micro reveals misconfigured Kubernetes containers in AWS EKS can expose sensitive AWS credentials via unencrypted HTTP API, leading to privilege escalation risks.
Apache CloudStack LTS updates patch five security flaws, including two critical vulnerabilities in Kubernetes and admin access, risking full system compromise.
Kaspersky warns organizations are overestimating container isolation. New analysis reveals hidden attack surfaces and crucial detection blind spots.
Red Hat's new llm-d project, with industry leaders, aims to revolutionize large-scale generative AI inference for enterprises using Kubernetes and vLLM.
A critical XSS vulnerability (CVSS 9.1) in Argo CD allows attackers to hijack user sessions and control Kubernetes resources. Update to fix
A critical containerd flaw (CVE-2025-47290) allows malicious container images to hijack the host filesystem. Update to version 2.1.1 now.
Bitnami Pgpool flaw (CVE-2025-22248) exposes PostgreSQL to unauthenticated access. Update to Pgpool 4.6.0-1 or Helm chart 16.0.0 to fix.
A critical vulnerability (CVE-2025-32445) in Argo Events allows users to gain privileged access to Kubernetes clusters. Upgrade to v1.9.6 to patch.
Learn about CVE-2025-27095, a JumpServer vulnerability that exposes Kubernetes clusters to token leakage risks.
Learn about CVE-2025-1974 PoC and its impact on Kubernetes deployments. Protect yourself from the IngressNightmare vulnerabilities.
Learn about CVE-2025-1974 and the IngressNightmare threat that could allow unauthorized access in Kubernetes clusters.
Learn about CVE-2025-29922, a high-severity vulnerability in the kcp project impacting Kubernetes-like control planes.
Learn about the security risks in OPA Gatekeeper for Kubernetes policy enforcement and how attackers can exploit common misconfigurations and policy weaknesses.
Stay informed about the severe vulnerability in Rancher (CVE-2024-52281) that puts Kubernetes deployments at risk. Learn how to protect your production environments.
Discover the risks of Argo misconfigurations in Kubernetes. Find out how attackers can compromise entire clusters and how to prevent it.
Learn about the major service disruption OpenAI faced and the causes behind it. Explore the impact on ChatGPT, the API, and Sora.
Learn about the high-severity vulnerability CVE-2024-10220 in Kubernetes that allows arbitrary command execution outside container boundaries.
Learn about the critical security update from GitLab addressing a high-severity vulnerability in Kubernetes clusters (CVE-2024-9693).
Discover the latest Kubernetes security flaws: CVE-2024-9486 & CVE-2024-9594. Learn how attackers could gain root access to VMs
Discover the new malware campaign targeting Docker and Kubernetes environments. Learn how attackers exploit vulnerabilities to deploy cryptocurrency miners.
Discover the details of the newly discovered security vulnerability CVE-2024-7646 in the ingress-nginx controller for Kubernetes.