Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kubevirt security audit

blog.quarkslab.com | research | #kubernetes | #virtualization | #vulnerability | #audit | #ostif | #kubevirt

Summary

Quarkslab's KubeVirt audit via OSTIF and the Sovereign Tech Fund: 15 vulnerabilities, including arbitrary host file read/write (CVE-2025-64324) and an aggregation-layer auth bypass.
Published
Collected

original ↗

Related coverage

  1. Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments (wiz.io)
  2. Cortex Security Audit (blog.quarkslab.com)
  3. Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation (blog.quarkslab.com)
  4. Scala Security Audit (blog.quarkslab.com)
  5. The IGVM File Format (blog.quarkslab.com)
  6. Paramiko Security Audit (blog.quarkslab.com)

back