Tag

Kubernetes security

2 stories

Critical Dell Container Storage Flaws Expose Admin Controls — Immediate Upgrades Required

Dell’s Container Storage Modules (CSM) were found to contain multiple critical vulnerabilities that can allow unauthenticated remote attackers to gain full administrative control of affected storage environments. The most severe issues — two CVSS 10.0 flaws — permit attackers to bypass authentication and escalate to administrator privileges, while other high-severity flaws enable privilege escalation inside Kubernetes clusters or token forgery. Dell has released advisory DSA-2026-448 and fixed the issues in…

Saugata DattaOct 3, 20264 min read91

Cloud Computing

VoidLink Malware Framework: Key Points on How It Targets Kubernetes and AI Workloads

Title: VoidLink Malware Framework: Key Points on How It Targets Kubernetes and AI Workloads Overview VoidLink is a modular malware framework observed targeting cloud-native environments, with emphasis on Kubernetes clusters and AI infrastructure. Goal: persistence, lateral movement, data exfiltration, and abuse of compute (e.g., model theft, crypto-mining, or training/serving misuse). Modularity enables plugins for container escape, kubeconfig harvesting, and targeted abuse of GPU resources. Threat model Targets: misconfigured clusters, exposed…

Saugata DattaMar 5, 20264 min read511

Critical Dell Container Storage Flaws Expose Admin Controls — Immediate Upgrades Required

VoidLink Malware Framework: Key Points on How It Targets Kubernetes and AI Workloads

Free Tools: IP, DNS, SSL