Why Editing IAM Policies Won’t Fix Your AI Agent Identity Problem
Editing IAM policies cannot fix the most common architectural mistake in shipping AI agents on...
Blog
Arbitrary Host File Access from containers launched by containerd CRI
CVE-2022-23648
Feb 27, 2023
Mar 29, 2022 – A vulnerability in containerd, a popular container runtime, allows especially containers to gain read-only access to files from the host machine. While general container isolation is expected to prevent such access, in Kubernetes, it is especially dangerous…
Related Articles
Privacy and Data Residency for AI Agents: What GDPR Requires That Static Controls Can’t Show
The residency evidence GDPR and the EU AI Act now expect lives in the runtime...
AI Agent Incident Response in Cloud-Native Environments: A Playbook for Modern SOCs
It’s 2 a.m. and the SOC has a Tier 3 page. A customer-service agent on...
Continue as a guest