corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d4a3-14c2-7331-a2c2-b45b92b83f93

Understanding Current Threats to Kubernetes Environments

Unit 42 · published 6 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
48
Words captured
5,498

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
Container Breakouts: Escape Techniques in Cloud Environments Read at the source ↗
unit42.paloaltonetworks.com
https://docs.paloaltonetworks.com/wildfire
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/advanced-url-filtering
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/dns-security
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/ngfw
docs.paloaltonetworks.com
https://docs.paloaltonetworks.com/advanced-threat-prevention/administration
docs.paloaltonetworks.com
https://www.paloaltonetworks.com/cortex/cortex-xpanse
paloaltonetworks.com
https://www.paloaltonetworks.com/cortex/cloud
paloaltonetworks.com
https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment
paloaltonetworks.com
https://start.paloaltonetworks.com/contact-unit42.html
start.paloaltonetworks.com
https://attack.mitre.org/techniques/T1190/
attack.mitre.org
https://www.paloaltonetworks.com/blog/cloud-security/kubernetes-attack-detection-response/
paloaltonetworks.com
https://attack.mitre.org/techniques/T1528/
attack.mitre.org
Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware Read at the source ↗
unit42.paloaltonetworks.com
Threat Actor Groups Tracked by Palo Alto Networks Unit 42 (Updated Aug. 1, 2025) Read at the source ↗
unit42.paloaltonetworks.com
https://www.ic3.gov/psa/2025/psa250226
ic3.gov
https://www.bitopro.com/ns/en-US/announcements/1226
bitopro.com
https://www.sysdig.com/blog/scarleteel-2-0
sysdig.com
https://github.com/inguardians/peirates
github.com
Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities Read at the source ↗
unit42.paloaltonetworks.com
https://www.paloaltonetworks.com/resources/whitepapers/kubernetes-privilege-escalation-excessive-permissions-in-popular-platforms
paloaltonetworks.com
Critical Security Vulnerability in React Server Components Read at the source ↗
react.dev
Exploitation of Critical Vulnerability in React Server Components (Updated December 12) Read at the source ↗
unit42.paloaltonetworks.com
https://attack.mitre.org/software/S0683/
attack.mitre.org
https://flare.io/learn/resources/blog/teampcp-cloud-native-ransomware
flare.io
https://www.ontinue.com/resource/voidlink-dissecting-an-ai-generated-c2-implant/
ontinue.com
Dual Privilege Escalation Chain: Exploiting Monitoring and Service Mesh Configurations and Privileges in GKE to Gain Unauthorized Access in Kubernetes Read at the source ↗
unit42.paloaltonetworks.com
TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations Read at the source ↗
unit42.paloaltonetworks.com
https://kops.sigs.k8s.io/
kops.sigs.k8s.io
https://kubernetes.io/docs/tasks/debug/debug-cluster/audit/
kubernetes.io
https://www.sentinelone.com/blog/climbing-the-ladder-kubernetes-privilege-escalation-part-1/
sentinelone.com
https://kubernetes.io/docs/reference/access-authn-authz/rbac/
kubernetes.io
Cloud Logging for Security and Beyond Read at the source ↗
unit42.paloaltonetworks.com
Trusted Connections, Hidden Risks: Token Management in the Third-Party Supply Chain Read at the source ↗
unit42.paloaltonetworks.com
Kubernetes Exposed: Exploiting the Kubelet API Read at the source ↗
aquasec.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Cortex-XSIAM-XQL
docs-cortex.paloaltonetworks.com
https://kubernetes.io/docs/concepts/security/pod-security-standards/
kubernetes.io
https://docs-cortex.paloaltonetworks.com/r/Cortex-CLOUD/Cortex-Cloud-Runtime-Security-Documentation/Endpoint-protection
docs-cortex.paloaltonetworks.com
https://www.paloaltonetworks.com/cortex/cloud/runtime-security
paloaltonetworks.com
https://docs-cortex.paloaltonetworks.com/r/Cortex-CLOUD/Cortex-Cloud-Runtime-Security-Documentation/What-is-Cortex-Cloud-Identity-Security
docs-cortex.paloaltonetworks.com
https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management
paloaltonetworks.com
https://www.paloaltonetworks.com/blog/security-operations/cortex-xpanse-identify-cisa-kev/
paloaltonetworks.com
https://www.cyberthreatalliance.org
cyberthreatalliance.org
https://www.microsoft.com/en-us/security/blog/2025/04/23/understanding-the-threat-landscape-for-kubernetes-and-containerized-assets/
microsoft.com
Hildegard: New TeamTNT Cryptojacking Malware Targeting Kubernetes Read at the source ↗
unit42.paloaltonetworks.com
https://www.paloaltonetworks.com/cyberpedia/kubernetes-rbac
paloaltonetworks.com
Mitigating RBAC-Based Privilege Escalation in Popular Kubernetes Platforms Read at the source ↗
unit42.paloaltonetworks.com
Roles Here? Roles There? Roles Anywhere: Exploring the Security of AWS IAM Roles Anywhere Read at the source ↗
unit42.paloaltonetworks.com