Red Hat OpenShift 5 reaches general availability for hybrid clouds
The release adds Lightspeed agent troubleshooting, post-quantum control-plane cryptography and a five-year lifecycle.
Stories per day · 30 days
12 RSS
Relatedai-agents4nvidia3authorization-bypass2consul2ebpf2google-cloud2hashicorp2inference2microvm2open-source2wiz2access-control1acl1advisory1agent-compute-engine1agent-substrate1apache-camel1authentication-bypass1
67 stories, newest first · one card per story
Stories tagged #kubernetes
NVIDIA donates OpenShell to CNCF and adds Kubernetes AI tools
A Crusoe test of Snapshot cut GLM-5.3 readiness from about eight minutes to 31 seconds.
Buoyant releases Kinference open-source inference control plane for Kubernetes and vLLM
Buoyant has released Kinference, an open source inference control plane for Kubernetes and vLLM.
1
Nvidia releases Kubernetes Engine for AI
Nvidia launches Nvidia Kubernetes Engine (NVKE).
ingress-nginx CVE-2026-116472 allows self-DOS via Ingress creation
User with Ingress creation permission may cause denial of service or redirect traffic in ingress-nginx.
Privileged-pod chain bypassed tenant isolation in anonymized cloud
A regular tenant reached worker-node root on managed Kubernetes v1.25.16+k0s.0; the provider fixed every reported issue.
6
HashiCorp patches Consul-k8s cross-namespace ACL bypass (CVE-2026-110720)
Versions 0.42.0 through 2.0.4 are affected only with system ACL management on; fixes are 1.8.18 and 2.1.0.
consul-k8s ACL flaw can grant elevated Consul privileges (CVE-2026-110720)
An attacker must already create a ServiceAccount in another namespace and reach the Consul API; active exploitation is not confirmed.
Apache Camel flaws allow remote code execution and data theft
Eight critical and high issues span Camel K and Camel components, with fixes that differ by branch.
1
Google Cloud launches Agent Compute Engine, one microVM per agent
Customer preview is months away; open-source Agent Substrate is already on GKE for non-production use.
1
Google Agent Compute Engine gives each Gemini agent its own microVM
A preview is planned in the coming months; Google says 200,000 agents suspended and resumed in under 500 milliseconds.
Wiz and Google Cloud preview native Wiz Sensor add-on for GKE
GKE Standard and Autopilot can enable the sensor with one flag; credentials stay in Secret Manager.
Paper parks AI-agent pod egress in-kernel until a verifier approves
A 98-instruction eBPF hold adds 4.5 ms median per released connection, with 24 microseconds of that in policy.
Wiz says AI agents ran multi-cloud intrusions end to end
One confirmed entry was Java remote code execution in an exposed Kafka UI, followed by malware and command-and-control.
NVIDIA open-sources Run:ai under Apache 2.0
The captured page is a cookie notice, so release details beyond the headline are unavailable.
SUSE Linux security advisory (AV26-1053)
Canadian Cyber Centre relays SUSE fixes for Rancher project access flaws and Steve certificate-validation weaknesses.
Prioritizing Microservice Requests via Retries
DiffTry repurposes microservice retries as stateless prioritization, reducing rejections from incidental and adversarial overloads.
Unpatched cross-namespace secret exfiltration in GoogleCloudPlatform/k8s-config-connector - CVE requested (CAN-2026-2039460)
An unpatched Config Connector flaw can exfiltrate secrets across Kubernetes namespaces after Google did not substantively respond.
NVIDIA DCGM Exporter Bug Exposes GPU Servers to Resource Exhaustion Attacks
NVIDIA patched CVE-2026-47483 in DCGM Exporter, allowing unauthenticated attackers to exhaust GPU monitoring servers.
9
CVE-2026-103413: Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml
Apache Camel Karavan CVE-2026-103413 applies unrestricted Kubernetes resources from a project's kubernetes.yaml.
Top 10 Best Container Image Scanning Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Trivy, Sysdig, and Wiz atop container image scanners, favoring context over raw CVE counts.
6
CVE-2026-71895: Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
DolphinScheduler before 3.4.3 lets non-admins retrieve Kubernetes kubeconfig credentials.
Can a Cloud-Native Harness Make Agents Reliable Beyond the Desktop?
Kubernetes creators' Stacklok is building Mecatl, an open-source cloud-native harness to run coding agents beyond the desktop.
CVE-2026-97146: Apache YuniKorn: Admission control bypass via system label forgery
Apache YuniKorn before 1.10.0 lets privileged users bypass admission checks by forging the app=yunikorn label.