Not-so-secret agents, those part of the cybersecurity research team, have found a chink in the armor – publicly exposed Kubernetes configuration secrets. Imagine forgetting to pull down the bathroom blinds; it’s exactly like that, only the implications are a lot riskier than just a slight embarrassment. These exposed secrets are essentially the welcome doormats for potential supply chain attacks, and not the friendly neighborhood kind!
It seems like Yakir Kadkoda and Assaf Morag of Aqua Security came across this rather reckless unpacking of secrets during their cyber-watch. The duo brought the issue into the limelight earlier this week, prompting organizations to go and check their metaphorical bathroom windows. Just as Clark Kent and Bruce Wayne guard the secrets of their alter egos, these two are out there protecting cybersecurity secrets.
And if you think this cyber faux-pas couldn’t get any worse – think again! Among those hanging their secrets out to dry are – wait for it – two top blockchain companies! Now, that’s like forgetting your pin number inside the ATM. And let’s be honest, that’s not a blockchain reaction anyone wants.
In a nutshell, the cybersecurity world is facing a potential threat due to the public exposure of Kubernetes secrets. Our saviors, Yakir Kadkoda and Assaf Morag, brought this issue to light. Among those vulnerable are top blockchain companies, which makes this issue even more critical. It’s high time organizations checked their configurations and ensured they weren’t laying out a welcome mat for supply chain attacks.
Original Article: https://thehackernews.com/2023/11/kubernetes-secrets-of-fortune-500.html
No products in the cart.