[CVE-2020-8554] Lessons Learned From The Kubernetes Man-in-the-Middle Vulnerability

Wiz Research details an evolved DERO cryptojacking campaign abusing anonymous-access Kubernetes clusters to deploy UPX-packed miners from Docker Hub images, plus updated TTPs and IoCs.

Wiz maps its Kubernetes security approach to the OWASP Kubernetes Top 10, combining agentless visibility, shift-left controls and real-time runtime detection with actionable remediation.

A roundup of favorite security talks from KubeCon Europe 2024: open-source threat intelligence, securing 900 clusters at Mercedes-Benz, modern image builds, and eBPF's real abilities.

Wiz introduces Image Trust and a Kubernetes Audit Log Collector: enforce only trusted images in production and monitor the Kubernetes control plane near real-time to catch threats across the SDLC.

Wiz releases NamespaceHound, an open-source tool that detects risky namespace-crossing violations and anonymous access in multi-tenant Kubernetes clusters to harden tenant isolation.

Wiz and Wiley release 'Kubernetes Security for Dummies,' covering cloud-native fundamentals, cluster hardening, container security, compliance automation and ten best practices.