One Compromised Kubernetes Node Can Expose Every Workload Identity Running on It
Unit42 researchers show a root attacker on a Kubernetes node can manipulate cgroups to make the local SPIRE agent issue other workloads' identities.
52
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 17, 2026
- Last mentionedSep 17, 2026
Timeline
1 articles · newest firstAppears with
- SPIFFEproduct · 1
- Spooffeproduct · 1
- Palo Alto Networksvendor · 1
- Kubernetesproduct · 1
- SPIREproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.