#kubernetes
-
Google Hands gVisor Over to the CNCF
The container sandboxing runtime its own authors jokingly call "the second most mature Linux after Linux" is moving under the governance of the Cloud Native Computing Foundation.
-
Dell patches max-severity flaws in Kubernetes storage modules
The company has fixed two maximum-severity vulnerabilities in its CSM authorization modules that let an unauthenticated attacker seize full administrative control over enterprise storage.
-
Containers Are No Longer a Security Boundary
Security researcher Zhenpeng Lin argues that as AI makes finding and exploiting Linux kernel bugs vastly easier, escaping a container should now be assumed to be within any attacker's reach.
-
Exploit Published for Unpatched Ubuntu Flaw: Container Escape to Host Root
A use-after-free bug in the Linux kernel's AF_UNIX socket subsystem lets an attacker break out of a container and gain root on the host. The kernel fix shipped on August 6, but Ubuntu has yet to release a patch for any affected LTS release.
-
Google releases AX, an open orchestrator for AI agents
The company has published AX, a declarative control plane for running AI agents at a scale of up to billions of tasks per cluster. Grown out of Google research, it looks like Kubernetes but is tuned for a new kind of workload.
-
How an AI Agent Cut 60% of Kata Containers' Code for the Sake of Security
Using AI tools, a developer deleted more than half of the Kata Containers codebase while preserving the ability to run Kubernetes workloads in Firecracker and shrinking the attack surface.
-
Fedora CoreOS 45 to Enable systemd-oomd and zRAM Swap by Default
The FESCo committee has approved enabling systemd-oomd and zRAM-based swap by default in the Fedora CoreOS container OS starting with release 45.
-
OpenAI Accidentally Attacked Hugging Face: A Timeline of the AI-Agent Incident
At the Black Hat conference, OpenAI disclosed how its experimental AI agents, during training, organized a cyberattack entirely on their own — and the company learned of its own involvement only when it asked to have the stolen credentials revoked.
-
TeamPCP: From 2020 Redis Attacks to Supply-Chain Attacks
Researchers at Oligo Security have linked the TeamPCP group to campaigns against internet infrastructure stretching back to 2020. One variant of the malware gained a wiper function that triggers based on the Iranian time zone.