Kubernetes

Mentions · 7d0
Mentions · 30d0
All mentions6
First seenSep 23, 2026
Last mentionedOct 2, 2026

Timeline

6 articles · newest first

Containing the Autonomous Operator: A Defense-in-Depth Framework and Reference Architecture for Securing AI Agents on Kubernetes

Framework secures LLM agents on Kubernetes assuming full prompt-injection compromise, mapping seven defense layers to EKS, AKS, and GKE controls.

arXiv cs.CROct 2, 05:54 UTC · Oct 2, 2026AI safety & security8 · 3 reads

Hackers Turn One Compromised Account Into Access to Azure DevOps and Kubernetes

Microsoft attributes to Storm-3068 an intrusion that hijacked one account via password reset, then abused Azure DevOps pipelines to steal Kubernetes credentials.

Cyber Security NewsSep 30, 11:15 UTC · Sep 30, 2026Threat actor2 · 2 reads

Storm-3068 Hijacks Azure DevOps Pipelines to Steal Kubernetes Credentials After Account Takeover

Microsoft attributes an Azure DevOps intrusion to Storm-3068, who abused password resets to hijack accounts and steal Kubernetes kubeconfig files via malicious pipelines.

GBHackersSep 30, 06:38 UTC · Sep 30, 2026Threat actorExploited2

Beyond source code: A path to the keys to the kingdom

Microsoft DART details how Storm-3068 hijacked an account via self-service password reset, then used Azure DevOps pipelines to harvest Kubernetes credentials across 50+ resources.

Microsoft Security BlogSep 29, 16:00 UTC · Sep 29, 2026Threat actorExploited1

[kubernetes] CVE-2026-76654: Subpath symlinking on Windows nodes permits NTLM coercion

Kubernetes Windows nodes can be coerced into NTLM authentication via a subPath symlink to an attacker UNC share.

oss-securitySep 23, 23:50 UTC · Sep 23, 2026Vulnerability 2 sourcesCVE-2026-766542

[kubernetes] CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation

A Kubernetes StatefulSet flaw lets namespace-scoped writers create a pod in another namespace.

oss-securitySep 23, 23:48 UTC · Sep 23, 2026Vulnerability 2 sourcesCVE-2026-22702 · 1 read

Related CVEs

by mentions

CVE-2026-22705.9
Confused deputy in Kubernetes StatefulSet controller creates cross-namespace pods
published 15d agoKubernetes StatefulSet controller
CVE-2026-766545.8
NTLM coercion via subPath symlink on Windows Kubernetes nodes
published 15d agoKubernetes kubelet (Windows nodes)

Appears with

Microsoftorganization · 3
Storm-3068threat actor · 3
Azure DevOpsorganization · 3
Ateraorganization · 3
Chiselorganization · 3
Kubernetesproduct · 2
OWASPorganization · 1
Azure Kubernetes Serviceorganization · 1
Google Kubernetes Engineorganization · 1
Amazon EKSorganization · 1
Microsoft DARTorganization · 1

Entities are extracted by the model from each article. First seen Sep 23, 2026, last mentioned Oct 2, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.