Stories Tag: information-security

Kubernetes Security: Three Common Attacks | by Artem Yushkovsky | Oct, 2021 | Medium

admin 1 month ago in

On the webinar, we demoed three groups of common attacks on K8s environments: I. privileged pods: II. exposed K8s dashboard as an attack entry point: III. application security (AppSec) as an entry point: See https://github.com/Slurmio/webinar-seck8s/tree/main/01-privileged-pods What would be the very first thing an attacker with kubectl access to a cluster would do? Correct: to get a maximally privileged shell on the Kubernetes master node. If…

Improving TOFU With Transparency. TOFU is an OK substitute for when you… | by Dan Lorenc | Aug, 2021 |...

admin 3 months ago in

Before you get upset, I’m not talking about the coagulated soy-bean excretion often served fried, I’m talking about the Trust-On-First-Use authentication scheme. Just like the food, there are times to reach for TOFU, but too much of it might not be the best for your health. This post dives into when TOFU works, when it doesn’t and some mitigations that make use of transparency logs….

How To Set Up A GKE Private K8S Cluster — Part 1 | by Rohit Sehgal | Gojek Product +...

admin 4 months ago in

If you’ve ever set up a GKE Private cluster, you’d agree it’s extremely tricky and you’ll encounter a barrage of questions. Why do we even want to have private cluster?What is the issue with public cluster?To access GKE managed clusters, you need to have client credentials. Does this mean GKE public cluster is not secure? Here’s what happens: When you spin up a public cluster,…

Review: Hacking and Securing Kubernetes cluster — The offensive labs | by Raghav Rao | Aug, 2020 | Medium

admin 1 year ago in

As every company is moving toward Docker and Kubernetes as a security professional, I always wanted to learn more about Kubernetes, how to attack and defend from common security pitfalls, while going through the internet for a different course, I stumbled upon the course from the offensive labs, which is called Hacking and Securing Kubernetes Cluster, when I gleaned through the curriculum, it was easy…

What is Mutual Authentication Model and Where is it used? | by Alper Ünal ☁️ 🐳 ☸️ | Jul, 2020...

admin 1 year ago in

In this flood, I will explain what the concept of Mutual Authentication Model is and where it is used. When connecting to a website (for example, a Bank’s online transaction center) with HTTPS, the browser requested the digital certificate from the server at the beginning of communication, checking whether this certificate was signed directly or indirectly by a CA – Certificate Authority that he had…

Docker escape using mounted docker.sock | by The Offensive Labs | Jul, 2020 | Medium

admin 1 year ago in

Docker socket is a UNIX socket that acts as a backbone for managing your containers. When you type any Docker commands using your doctor client, your Docker client basically interacts with this Docker socket and manages your containers. When you download Docker images from the Docker Hub and when you start containers using those images, the developer of the image may ask you to mount…