PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Announcing the EKS Cluster Games

wiz.io | research | #cloud | #cloud-security | #aws | #kubernetes | #container-security | #ctf | #eks
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Wiz-sponsored cloud security CTF covering five real-world Amazon EKS misconfigurations: players act as the attacker in a controlled environment and earn certificates and leaderboard spots.
Published
Collected

Related coverage

research · calif.io
Privilege escalation in AWS Elastic Kubernetes Service
# Privilege escalation in AWS Elastic Kubernetes Service How a pod with the wrong permissions becomes control of the whole cluster. An Trinh and Duc Nguyen April 2, 2023 cloud Update · August 19,...
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
blog · wiz.io
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
blog · wiz.io
Sailing Securely Across the SDLC: Introducing Wiz's Image Trust and Kubernetes Audit Log Collector
Wiz introduces Image Trust and a Kubernetes Audit Log Collector: enforce only trusted images in production and monitor the Kubernetes control plane near real-time to catch threats across the SDLC.
blog · wiz.io
NamespaceHound: protecting multi-tenant K8s clusters
Wiz releases NamespaceHound, an open-source tool that detects risky namespace-crossing violations and anonymous access in multi-tenant Kubernetes clusters to harden tenant isolation.
blog · wiz.io
New attack vectors in EKS
Wiz Research maps attacker tactics against new Amazon EKS features: a compromised IAM identity can enumerate clusters through Access Entries APIs and pivot between cloud and cluster.
Back