Runtime Incident Classification: Turning a Noisy Alert List Into a Triage Decision
Here is a scene every security team knows. A reverse shell opens a connection to...
Blog
Arbitrary Host File Access from containers launched by containerd CRI
CVE-2022-23648
Feb 27, 2023
Mar 29, 2022 – A vulnerability in containerd, a popular container runtime, allows especially containers to gain read-only access to files from the host machine. While general container isolation is expected to prevent such access, in Kubernetes, it is especially dangerous…
Related Articles
Why Your Detection Latency Budget Determines Blast Radius
Most teams buy detection on a single number. The datasheet says “millisecond detection,” the proof-of-concept...
What to Log for AI Agent Activity: The Minimum Viable Audit Trail
The first time a security team needs an AI agent audit trail is usually 72...
Continue as a guest