How One Kubernetes YAML Can Hand Over a GCP Organization

A Kubernetes user with limited permissions can potentially gain control of an entire Google Cloud organization by exploiting the authority granted to Google Kubernetes Config Connector. Varonis explains how this confused deputy problem can turn a single Kubernetes YAML file into a path to organization-wide privilege escalation.

Source: https://www.bleepingcomputer.com/news/security/how-one-kubernetes-yaml-can-hand-over-a-gcp-organization. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.

Recommended for you

DEV233 Hot7 min4 d agoTop

I Built a Visual System Design Reference — Switch Any Architecture Between AWS, Azure, GCP & Open Source

I Built a Visual System Design Reference — Switch Any Architecture Between AWS, Azure, GCP... Tagged with systemdesign, webdev, opensource, showdev.

#webdev#open-source#awsSource

InfoQ1 Hot34 min14 h ago

Distributed LLM Inference on Kubernetes with llm-d, Wasm, & TornadoVM

Edoardo Vacchi covers the evolving landscape of WebAssembly on the backend, running Java workloads on GPUs using TornadoVM, and optimizing distributed AI inference using llm-d and vLLM on Kubernetes.

#kubernetes#webassembly#vllmSource

ITNEXT26 Hot56 min6 d ago

Kubernetes Multi-Tenancy, Layer by Layer: Isolation Proved by Being Refused

“” is published by Filipe Motta in ITNEXT.

#kubernetes#multi-tenancy#ciliumSource

Isovalent1 Hot6 min16 h ago

A refreshed Network Policy Editor website and two new VS Code extensions

Meet the refreshed Network Policy Editor and two new VS Code plugins.

#kubernetes#vscode#ciliumSource

Coralogix1 Hot10 min2 d ago

What Is OpenTelemetry? A Guide to the OTel Framework

What is OpenTelemetry? See how the OTel framework standardizes traces, metrics, and logs so you can switch backends freely.

#devops#kubernetes#observabilitySource

ITNEXT1 Hot9 min3 d ago

100% GPU Utilization, 39% of Rated FP16

nvidia-smi GPU-Util says a kernel ran, not how much work the GPU did. How DCGM metrics on Kubernetes show real GPU throughput, power caps and node health.

#kubernetes#prometheusSource

CNCF1 Hot11 min3 d ago

Faster LLM inference startup: What you need to know

Adding an inference replica creates capacity only after the new instance can serve requests. Between starting a process and generating a response…

#kubernetes#ai-inference#vllmSource

Hacker News1 Hot6 min3 d ago

Nvidia Kubernetes Engine (NVKE)

NVIDIA Kubernetes Engine (NVKE). A management plane for GPU Kubernetes on bare metal. - dsx-ai-factory/nvke

#kubernetes#infrastructure#goSource