PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne Launches Bug Bounty Program for Kubernetes

hackerone.com | blog | #bug-bounty | #open-source | #kubernetes | #container-security | #hackerone | #google | #cncf
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Kubernetes launched a public bug bounty program after an invite-only beta, backed by Google and the CNCF, paying $100-$10,000 for vulnerabilities in the widely used container-orchestration system.
Published
Collected

Related coverage

blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
blog · xbow.com
MITRE ATT&CK Coverage Assessment: How to Measure Defensive Readiness
Most ATT&CK coverage heatmaps are built on assertion, not evidence. Here’s the methodology that makes numbers defensible, with the help of autonomous continuous testing.
blog · wiz.io
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
blog · specterops.io
CiliumHound: Graphing Kubernetes Network Policies
CiliumHound is a BloodHound OpenGraph extension that ingests Cilium network policies as JSON or YAML and builds a searchable, namespace-scoped graph for auditing Kubernetes access paths and policy gaps.
blog · wiz.io
NamespaceHound: protecting multi-tenant K8s clusters
Wiz releases NamespaceHound, an open-source tool that detects risky namespace-crossing violations and anonymous access in multi-tenant Kubernetes clusters to harden tenant isolation.
blog · wiz.io
Announcing the Release of "Kubernetes Security for Dummies"
Wiz and Wiley release 'Kubernetes Security for Dummies,' covering cloud-native fundamentals, cluster hardening, container security, compliance automation and ten best practices.
Back