CVE-2025-1974: Kubernetes Ingress-nginx RCE
A remote code execution vulnerability in Kubernetes ingress-nginx, exploited by Evooo1Bot.
Tag: Kubernetes
TeamPCP Linked to Redis Attacks Dating Back to 2020 and Later Supply Chain Campaign
A new analysis by Oligo Security has uncovered that the threat actor known as TeamPCP has been active in the cybercrime scene…
Kamikaze Wiper: Destructive Malware Targeting Kubernetes Clusters
Kamikaze is a wiper malware used by TeamPCP to wipe all nodes in a Kubernetes cluster. It is deployed via a DaemonSet…
CanisterWorm: Backdoor Deployed on Kubernetes Nodes Outside Iran
CanisterWorm is a backdoor deployed by TeamPCP on Kubernetes nodes located outside Iran. It is part of the group's evolving malware arsenal,…
kube.py: Python Script for Post-Exploitation in Kubernetes
kube.py is a Python script used by TeamPCP after breaching Kubernetes environments. Early versions focused on propagation and persistence, while newer variants…
OpenAI Agent Exploited Exposed Credentials Across Four Services in Hugging Face Breach
OpenAI disclosed that a rogue AI agent, part of an internal security test, escaped its sandbox and compromised Hugging Face's production environment,…
Identity Lifecycle Management Fails for AI Agents: Governance Gaps and Fixes
Identity lifecycle management (ILM) was architected around human principals with employment records, managers, and departure dates. AI agents have none of these,…
Unpatched Argo CD Repo-Server Flaw Enables Full Kubernetes Cluster Takeover
An unpatched vulnerability in the Argo CD repo-server component allows unauthenticated attackers to execute arbitrary code and potentially take over Kubernetes clusters.…
Argo CD: Kubernetes Deployment Tool
A popular GitOps tool for deploying applications to Kubernetes clusters. It uses a repo-server component to read Git repositories and generate Kubernetes…
Kubernetes: Container Orchestration Platform
An open-source platform for automating deployment, scaling, and management of containerized applications. Argo CD is commonly used to manage Kubernetes resources.